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Key elements of the 
response stream: 

► A status code (for whether 
the request was successful) 

► Content-type (text, picture, 
HTML, etc.) 

► The content (the actual 
HTML, image, etc.) 



Why use Servlets & JSPs 

Web applications are hot. How many GUI apps do you know that are used by 
millions of users worldwide? As a web app developer, you can free yourself from the grip 
of deployment problems all standalone apps have, and deliver your app to anyone with a 
browser. But you need servlets and JSPs. Because plain old static HTML pages are so, 
well, 1999. Learn to move from web site to web app. 

5 e ^temen[s of „ Exam objectives 2 

What web servers and clients do, and how they talk? 4 

Two-minute guide to HTML 7 

What is the HTTP protocol? 1 0 

Anatomy of HTTP GET and POST requests and HTTP responses 16 

Locating web pages using URLs 20 

Web servers, static web pages, and CGI 24 

Servlets Demystified: write, deploy, and run a servlet 30 

JSP is what happened when somebody introduced Java to HTML 34 
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Sev-vlet 



Web app architecture 

Sen/lets need help. When a request comes in, somebody has to instantiate 
the servlet or at least allocate a thread to handle the request. Somebody has to call the 
servlet's doPost() or doGet() method. Somebody has to get the request and the response 
to the servlet. Somebody has to manage the life, death, and resources of the servlet. In 
this chapter, we'll look at the Container, and we'll take a first look at the MVC pattern. 
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How it looks in code (and what makes a servlet) 
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Tomcat-specific 



This divettovy name also i-epresei 
the "toniext root" which Tomfia 
uses when resolving URLs. We'll 
explore -this Condept In great detail 
> the deployment chapUy. 



Part of the 
Servlets spec 
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Mini MVC tutorial 

Create and deploy an MVC Web app. It's time to get your hands dirty 
writing an HTML form, a servlet controller, a model (plain old Java class), an XML 
deployment descriptor, and a JSP view. Time to build it, deploy it, and test it. But first, you 
need to set up your development environment. Next, you need to set up your deployment 
environment following the servlet and JSP specs and Tomcat requirements. True, this is a 
small app... but there's almost NO app that's too small to use MVC. 
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This patkaje iWl»t Is e*attly what we used 
>n the development environment. Unless youVe 
deployin) your classes in a OAR (we'll talk about 
that late*- in the book), then you MUST put the 
faekaje directory sWtuve i—ediately under 
WEB-WF/tlasses. ' 
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Let's build an MVC application; the first design 

Create the development and deployment environments 

Create and test the HTML for the initial form page 

Create the Deployment Descriptor (DD) 

Create, compile, deploy, and test the controller servlet 

Design, build, and test the model component 
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Create and deploy the view component (it's a JSP) 

Enhance the controller servlet to call the JSP 
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Being a Servlet 

Sen/lets need help. When a request A servlet's job is to take a client's request 
and send back a response. The request might be simple: "get me the Welcome page." Or 
it might be complex: "Complete my shopping cart check-out." The request carries crucial 
data, and your servlet code has to know how to find it and how to use it. And your servlet 
code has to know how to send a response. Or not... 



NOT Idempotent 



Servlet uses the POST 
data to update the 
database. 




with a generated HTML page. 
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Being a web app 

No servlet Stands alone. In today's modern web app, many components 
work together to accomplish a goal. You have models, controllers, and views. You have 
parameters and attributes. You have helper classes. But how do you tie the pieces 
together? How do you let components share information? How do you hide information? 
How do you make information thread-safe? Your job may depend on the answers. 
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Context Attributes 
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Conversational state 




Web servers have no short-term memory. As soon as they send you 

a response, they forget who you are. The next time you make a request, they don't 
recognize you. They don't remember what you've requested in the past, and they don't 
remember what they've sent you in response. Nothing. But sometimes you need to keep 
conversational state with the client across multiple requests. A shopping cart wouldn't 
work if the client had to make all his choices and then checkout in a single request. 

Exam Objectives 224 

It's supposed to be a conversation, (how sessions work) 226 

Session IDs, cookies, and other session basics 231 

URL rewriting: something to fall back on 237 

When sessions get stale; getting rid of bad sessions 24 1 

Can I use cookies for other things, or are they only for sessions? 250 

Key milestones for an HttpSession 254 

Don't forget about HttpSessionBindingListener 256 

Session migration 257 

Listener examples 261 



7 Being a JSP 
A JSP becomes a Sen/let. Aservlet that you don't create. The Container looks 
at your JSP, translates it into Java source code, and compiles it into a full-fledged Java 
servlet class. But you've got to know what happens when the code you write in the JSP 
is turned into Java code. You can write Java code in your JSP, but should you? And if 
not Java code, what do you write? How does it translate into Java code? We'll look at 
six different kinds of JSP elements — each with its own purpose and, yes, unique syntax. 
You'll learn how, why, and what to write in your JSP. And you'll learn what not to write. 

Exam Objectives 282 

Create a simple JSP using "out" and a page directive 283 

JSP expressions, variables, and declarations 288 

Time to see a JSP-generated servlet 296 

The out variable isn't the only implicit object... 298 

The Lifecycle and initialization of a JSP 306 
While we're on the subject... let's talk more about the three directives 314 

Scriptlets considered harmful? Here's EL 3 1 7 

But wait... we haven't seen: actions 323 
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MyJSP.jsp t o** 

_ loaded and 
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MyJSPjsp.class Servlet 
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Script-free pages 




(T) The Header file ("Header.jsp") 



<htmlxbody> 

<%@ include file="Header . jsp"%> 




«*trvtc«E« j 

We Anow ftow (o make SO/IT suet /ess. 

Contatt us al: likeucLj^^wickeiilysniiin.ci: 



Lose the Scripting. Do your web page designers really have to know Java? 
Do they expect server-side Java programmers to be, say, graphic designers? And even 
if it's just you on the team, do you really want a pile of bits and pieces of Java code in 
your JSPs? Can you say, "maintenance nightmare"? Writing scriptless pages is not just 
possible, it's become much easier and more flexible with the new JSP 2.0 spec, thanks 
to the new Expression Language (EL). Patterned after JavaScript and XPATH, web 
designers feel right at home with EL, and you'll like it too (once you get used to it). But 
there are some traps... EL looks like Java, but isn't. Sometimes EL behaves differently 
than if you used the same syntax in Java, so pay attention! 
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Custom tags are powerful 

Sometimes you need more than EL or standard actions, what if 

you want to loop through the data in an array, and display one item per row in an HTML 
table? You know you could write that in two seconds using a for loop in a scriptlet. But 
you're trying to get away from scripting. No problem. When EL and standard actions 
aren't enough, you can use custom tags. They're as easy to use in a JSP as standard 
actions. Even better, someone's already written a pile of the ones you're most likely to 
need, and bundled them into the JSP Standard Tag Library (JSTL). In this chapter we'll 
learn to use custom tags, and in the next chapter we'll learn to create our own. 



r— <c : f orEach var="listElement" items="$ {movies } " 

^ - 



/ <c : f orEach var="mov±e" ±tems="${listElement}" 
L. <tr> 4 



<td>$ {movie}</td> 
</tr> 
L </c : forEach> 



«.*< 

loop 

^_ </c:forEach> 

</table> 
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When even JSTL isn't enough... 

Sometimes JSTL and standard actions aren't enough, when you 

need something custom, and you don't want to go back to scripting, you can write your 
own tag handlers. That way, your page designers can use your tag in their pages, while 
all the hard work is done behind the scenes in your tag handler class. But there are three 
different ways to build your own tag handlers, so there's a lot to learn. Of the three, two 
were introduced with JSP 2.0 to make your life easier (Simple Tags and Tag Files). 
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You still have to know about Classic tag handlers 
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A very small Classic tag handler 
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The Classic lifecycle depends on return values 
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IterationTag lets you repeat the body 


537 


Default return values from TagSupport 


539 


The DynamicAttributes interface 
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With BodyTag, you get two new methods 
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What if you have tags that work together? 


567 


Using the PageContext API for tag handlers 
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Deploying your web app 

Finally, your web app is ready for prime time. Your pages are 

polished, your code is tested and tuned, and your deadline was two weeks ago. But 
where does everything go? So many directories, so many rules. What do you name your 
directories? What does the client think they're named? What does the client actually 
request, and how does the Container know where to look? 



Reference to a local bean 

<ajb-local-ref> £ 

<ejb-ref-name>ejb/Cuatoine 



jtroi w** " S " t 





Exam Objectives 


602 


Key deployment task, what goes where? 
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WAR files 


612 


How servlet mapping REALLY works 
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Configuring welcome files in the DD 


622 


Configuring error pages in the DD 
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Configuring servlet initialization in the DD 
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Making an XML-compliant JSP: a JSP Document 
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Keep it secret, keep it safe 

Your web app is in danger. Trouble lurks in every corner of the network. You 
don't want the Bad Guys listening in to your online store transactions, picking off credit 
card numbers. You don't want the Bad Guys convincing your server that they're actually 
the Special Customers Who Get Big Discounts. And you don't want anyone (good OR 
bad) looking at sensitive employee data. Does Jim in marketing really need to know that 
Lisa in engineering makes three times as much as he does? 



Top Ten Reasons to do 
your security decfarafcVe/y 

© Lo ° ks !«to„you,r, a ™. 

(D It's on the exam. 

Allows applfcatft 
servlets without 

(4) It's just cool. 
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The Big 4 in servlet security 653 
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Authentication: four flavors 677 
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Securing data in transit: HTTPS to the rescue 682 

Data confidentiality and integrity sparingly and declaratively 684 



The power of filters 

Filters let you intercept the request. And if you can intercept the request, 

you can also control the response. And best of all, the servlet remains clueless. It never 
knows that someone stepped in between the client request and the Container's invocation 
of the servlet's serviceQ method. What does that mean to you? More vacations. Because 
the time you would have spent rewriting just one of your servlets can be spent instead 
writing and configuring a filter that has the ability to affect all of your servlets. Want to add 
user request tracking to every servlet in your app? No problem. Manipulate the output 
from every servlet in your app? No problem. And you don't even have to touch the servlet. 
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Enterprise design patterns 

Someone has done this already. If you're just starting to develop web 
applications in Java, you're lucky. You get to exploit the collective wisdom of the tens 
of thousands of developers who've been down that road and got the t-shirt. Using both 
J2EE-specific and other design patterns, you can can simplify your code and your life. 
And the most significant design pattern for web apps, MVC, even has a wildly popular 
framework, Struts, that'll help you craft a flexible, maintainable servlet Front Controller. 
You owe it to yourself to take advantage of everyone else's work so that you can spend 
more time on the more important things in life... 
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topics, and difficulty level are all virtually identical to the real exam. We know. 
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somethli^UBusual li was bu3i thai wa^ aad it helps you sm> ■ nh we. 

So what does your brain d<> with .ill the routine, ordinary, m rami things 
yon encounter, Eveiythiil n it ftsi 10 stop iheui IVj >n"i in'ei'leviii^ wiili the 
brain's ma/ jttli -nrecording tiling lhai nmttrr. h dt«rsii'i I mi her saving 
ihe boring 1 1 (tags I hey never make it past the "this is obviously not 
important" Ultra 

I |. m Hue-, vi mi iniiin hmw what's important? Suppose yrm'rr out lor 
a day hike and n tiger jumps in front of you. what, happens inside your 
head and body? 

Neurons lire. Emotions crank up. Chnm«ik flOgf, 

And that's how your brain knows... 

This must be important! Don't forget it] 




Bui imagine yoifn- at home, i>r in t library U\ a safe, warm. ti^er-lree /<mr. W*j n ^ 
You're studying. Getting ready l<>r au fNain, < )r tr\ ing lo karn s< itUc rt 




tough technical lopir your Ijoss 1 1 rinks will lab' a wn L im days ai 
the mosL 



Jum utif problem. Your brain's trying to do you a hig favor. It's iryirit; 
In make sure ihat this- tifwioHsir non-important content doesn't clutter 
up scarce resources. Resources that are heller spent storing the realty' 
tig tbiti#>- likt linen,, I jJtc the danger of fire, l.ikc how yuu should 

never again ntowbosrd in shorts. 

Ai ii I i here's tm simple way ti t ui\ your brain, "Hey drain, iharik y»u 
very much), bui no matter htow dull mil biwtk is, and how Kttfci I'm 
registering on the emotional Ridim- *cak righi now, l really >k> Want 
yem tip beep ihis nIiiIT around." 
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vou don't ft^lL not-bo* ^ Sh n '" 9 r ^ " education- psychology. 
, earn / nfl tak« 3 tot more than text on peg 

Same of the Head First learning principles: 

™ r„ more memoratf* than words alone, and 
Matt* it visual. ln^«pr. far more mem . |nreCahand 

8, on another page, and learners will "P 
related to the content 

„ atkln ,, and personalis style- " 

j.nwM better on post- learning 

Mb ,f the content spoke d.rectiy <° rtflr|ei 

instead of lecturing. Use casual languay -DrtTinil a 

M ***** Wh,ch would ,» pay more ttfftfb 
emulating dinner party companion, or a MMfR 

G .t the .earn-r to ihinK d ^'* J**^^ hea d.. ***** 
^ unle.yo^ely^o— 






, attenti on Wt -ve all haiilM-lr^lly want fl«rn 
Get^.nd h«P-*he ^^^^Ww* i^a«em ionics 

mat are Out of the ordinary. MM*-* JWJJ * hi> y£jUf brain W « 

Wt) I L^ninga^^^caltopiCPCSn,,.^ 

f ,„rnm«chmnr e qulcMytflf S nqL 

K ,arg e :y d*pendenton its emotional WrfW • neart . wre nch,rtf, S tor«* about a 
^^^^^ 
bw and his dog. We're giving emot,ons ld» ** , ^ ^ D , 

q Rulei-thatconies when you solve a puzzle, j| oU , wbfrom engine doesn't, 

realize yu know something Ast^l more tec me 



\ 
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Metacognition: thinking about thinking 



If ymj rritlly WWtll to leant, and yifll Wluit (o Ir.irn more i|iii. kly and limn- deeply, 
pay ottCtttitHl in hrw ynu pay attention. 1 hiiik ,11* ml litw yi.m lliiiik, Leam hem you 
learn. 

Must of us die] not take courses on metacngnition off learning theory when we vwjtS 
growing up- VVr wen- rxpei'tfii M It-am, hut rarely fcu^gSt tu learn. 

But wj ,-ssumr that if you're holding I his Un>L you really wani le.irn how to build 
wIj applications in J;ii.l and jiass i Ik- SlJWO ) eSjajtl, And yiiupniliably d-m'l wral 
to spend a lot of lime. If you want in Use whnl you raid in this I h ink. you need to 
rpflifvnifr what you read. And lot' tEinl. you've got to audmtouit it. To get the- most to i-m 
this ljfMik. air n«Y honkur leirnittg experience, take reKpimibiliiy lor your brain. Your 
brain on {im eonirm 

Tin* ln< k is Ul f^-t your bout) to KM the new material yittt'n- learning 

.1- Ki-.ll]"> Important. ( : IE 1 1 ill In MINI ■.M'll-lii-illir As illipi H'Ultl <|S 

a liger, t.Jthcnvise, you're in lor a constant battle, with your brain 

■ ! L! II ■■ 1 1- ■•' li k<-' ; i I In i • 'II |i 111 hull. 1 1 kill". 

So just how DO you get your brain to treat 
servlets like it's a hungry tiger? 

'I "he re's ilii- slow leclions wav. oi the hisler. more eHi-elive way. 
The dot* way is about sheer repetition. You obviously kriov, that 
yQU dtV able l" leant ;md remember even the dullest . >f topic* 
il v. .n ki 1 1 piiutidiiijf ilit L mitc thing into p.iur brain, With enough 
repetition, your brain says, "This docsn'l jtt! important to him, but he keeps lobbing at 
the same thinp over and oivr and Wwr, so I suppose it must be." 

The (aster Way is to do anything thai ituvtasen hraiit at Unity, esporkiJlv tlit'li i in 
nt' biain activity The thing* bn the previous page cor a big pari of the solution, 

and tlnVre all ihiiigs that have licen proven to help your brain work in yotir IkVOT. For 
example, studies abow that putting words K~$& the pktttRa ihey describe (as opposed ti i 

VrvlfniKio&i&hpak iilc-* in tflnn n j j rrc* 1 1 t>ii- -i r r*ntwkw\ j-.t tu t thn I*i*u4t- I mri I j-'iiil£'-l vnnv r \r i n i In Jrr t> i 

WMI II. IT I IV LV I-MTV JLJ 1.1X4. JJil^Li I U. 4. Ll| H IJ-- J| i l.'d hi I I I IT Uyii I Wj«| -.lil.Ld-.Ll J1_t|l4J. hrh-LLJ.ll I'-T II 1 LT > 

makes serine of how the words and picture relate, and this causes more neurons to far. 
More m-umiis firi|t-j = more ehajuts for your brain tajpi that this is sojnetbinj; worth 
payinfjfitueuiinii to, and possibly ret-onlitiM- 

A li in\'t-rsaliona] siylr Ih'Ijjs bt-i-aiiHt- [xx'fpfc tmcl to pny iikht attention whm tht-y 
ptaiaawc lhal thry'ti' in .1 epm'ersaiion. since they're expecled to liillo^ 1 . along and hold nj; 
their end. The amazing tiling is, your brain doesn't necessarily atrt lhal the 'Yonversaliun*" 
Ls hetween \v>u and a bookl On the other hand, if the -vritinj; style is ibrmal and dry. your 
brain |jt'ivi'i\f>, il ihe ttitne Waj jvm i xpi rieiier l'«-ini> leelnn-il lo wliilr villiiuj In a oiotiiliil 

Bm pi* ion-.-, and eon^rs.nional siylc aie just I he Ijeginniti^ 
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how to use this 



Here's what WE did: 

We wed pictures, because your brain is t uned fer visuals, not text. As flu as your brain '-s 
concerned, a picture really a Worth B thousand words. And wlicn testt and pictures wmk 
together; We embedded the test m the ptcture* because your brain works more effecrivdj 

when llit- li-xr is ,-crfAi« Mir Mlillji lilt- tCXl refers to, as opposed (okl a < ■ ■ | ■ I i ■ = ■ ■ 0* buried iit the 
text somewhere. 

We used rMfomdntiey, ^nyinLf the same tiling in different ways and with dilfercnt media types, 
and multiple semes, to increase the cluuu e that the content (jets coded into more than One art- a 
of yum brain. 

We used i-ont:t']iK and ptctures in unexpeeied waj^becauw your brain ts tuned for 
iv-M'ltv. and we used pictures and idea* With ai tcasl <>.'Wf nmnfianal t.-->ii.-vf. because jtoyi 
brain is tuned to pay attention bp the biochemistry of emotions. That whkli causes you to 
fir/ somellunsr. is more likely to be remembered, cvm il' that feeling is nodiing more tlian a 
lirdi httntoi: surprise, m interest. 

We used :■ person. di/.-d. eun-erstttit>nal style. Iwtnw ynur brain in rimed to pay 
mure attention when ii believes you're in a tmnttenatbli than if ii drinks you're passively 
listening to $ prrRenlaLinn. Yfuir brain does iliis even when you'rr reading. 

We included more dion 4EJ activities* because your brain is tuned to kiirn and rr member 
more when yon do things than when yau tend about tlimgv And we made the exercises 

ehallmging-vrt-dnahfe. becaute (haft what most people prefer. 

U'i- n-i'il multiple learning slyles. I n-r:ius<- imglll "| « I > -t i ■ I slfp-l f) -ilrf i ] mired I Ires, while 
simicone *'Ke w.inis [o undersund ilii- liinjiii mre lirsl, and someone else jud Want* \o-VX 
hi ■ Maniple, Hut regardless ol your i twn learning prelrTriicT. trenvne benefit!! horn seeing Hie 
same eotilent represented in multiple Ways. 

We itiilndi- content lor both sides of your bruin. l>erause. the more of your brain you 
engage, the more likeK you are to learn and remember and the longer you carl M$y focused. 
Since working One side of die brain often means giving the Other (tide a chance to rest, you 
e;in be more produrlivr at learning lor a longer period of lime. 

And we include 1 1 stories and exercises that presein more than one point of view, 

because tout brain u umed to iearn more deeply when it s iorccci to moke evaluations and 

hjctgrrtenti 

We inelmled challenge*, \. idi exercises, and by Liskiim question* dial iltju'i always haw 
a straight answer, totalise your brain is tuned to [cam Ant) remember whrn it bus to wodt at 
something. I'll m k ,itn»nt n Mm i, nil s»ei mud h.i.li in shajwjusi l>y a ■nkhing people ai the 
gym. But we did our best to make sure that when you're working hard, it's on the right diings. 
Tluitjfow'rw not spending one extra dendrite ^soefBsing a hard-to-under«tand exiuuple, 
..i ii.HKirindLfhYi.ilt. jargon-lade^ oi nwrh/tarse lexL 

We nseil people. \\\ .slorifx examples, jiiel i ires, dr., bei ausr, vyell. LrcMihf ivw'rf a person, 
Arid your brain pays niorr attenoOO to pm{>\e\\\\\\\ il diM-s to things. 

We used im H0/2(l appixiarh. We assume that il' you're ijoing lor a I'hD iujSHs, this won't be 
your only book, So we don*t talk about e\ erything., . just die stuff you'll actually need, 
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Here's what YOU can do to bend 
your brain into submission 

Sci, wf did rjiir part, 'llic reel is up to you. These tips are a. 

starting poinu listen to your brain and figure out what works 

for you and what dot-s.ni. Try new tilings. 
«** Uii ^ Jh(J 5ij£k jt 



Or 



(\~) Slow down. The mare you understand, 
the less you have to memorize. 

lJorff jusl jrarf. Stop and dsink. When tine 
hook you ;i question, donr jusr skip to iIh 1 
aaiwer, Iniagine thai someone neatly ti diking 

the qucsUoo. TV more deeply you lone \ 

brain to iliiiik, the better chance yon have of 

learning; and remembering: 

(D Do the exercises. Write your own notes. 

We put them in. but if we did them for you, 
thai would hi' likr having someone else <\<< 
your workout* for you. And don't just AW, at 
the exercises. Use a peadL There 1 * plenty of 
evidence dial physical activity H<fiil« learning 
i. -.iii increase fit* learning 

(J) Read the "There are No Dumb Questions" 

I hai means all of them, Thtry*re nod optional 
sidebars- tApy're purr af the core content! 

Don't skip them. 

Make this tha last thing you read before 
bed. Or at least the last challenging thing. 

Part of the learning I especially the transfer to 
bng*(erni memory j happens a/ieryou put the 
book down. Your brain needs lime on its own, t" 
do rnore processing (f yr>u put in somethitrg new 
dnriiii; ili.it | locesriag tjntt, hjOk of wftai you 

jtHl learned will t»e lost. 

(?) Drink water. Lots of it. 

Yinu brain works Ih^i in a nice Ladi □!' iltiid. 
! ). hydration [which ran happen before you ev*t 
feel thirstyl dti-rea*e& cognitive function. 



(g) Talk about it. Out loud, 

txpenking activates a different part of the brain, 
If yotiVe trying to understand something or 
increase y fixe chance of remembering ii later, nay 

it oirj bud, Better sriE, try to explain ii mil I I 

in someone else. You'll learn mure quickly, and 
yon might umwr ideas you hadn't known were 
there when you WCte reading about il . 

(j^ Listen to your brain. 

Phv attention lo whether your hniin h gelling 
overloaded II you find yourself starting tc skim 

the surface or fm^rt what you just read, it's lime 
lor a break, Unee ynu go pa.%t a certain point, ynu 
WOrt i (earn Enter Iry trying to shove more in. and 
you might even hurt the process. 

(s) something. 

Vi mr braiu needs to know dial I his maUm> Gel 
involved with liii- vim ii -• M.iki- up '. . .ur own 
captions for the photos, Groaning over a. had joke 
iy W/7/bcllei ill. n i Ji-rlii]j2 in idiii iij, .H ,dl. 

Take the final Coffee Cram mock en am 
W only AFTER you finish tho hook. 

Il \oo lake ll»e e\ain loiniion, you Wun'l uel a 

■ I'-.i i tun? of In iw rxsm W hi ore Ii i-r it if exam, 
Wail until yi i-l i ihink jfl m're > Ii «e to ready, and then 
Like ilii.- 1 -xa in .Vii<l in suii- vmi niilv i;tvi mui^lf 
I ftlt minutes —the length oi' lime you'll have to 

take the real st WCD exam. 
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What you need for this book; 



Besides, your and :t perni!, you need Java, Tomtrat j, and a 

timipuli'i- 

You do nof ncfd any giber dewlLTpmcnt tool, suck as an Integrated Development 
Environment ■liUl-lh. Wi? strongly rc-rommend thai you not Use anything but a 
hatii- ediiur until v«u complete this buolc. A servtat/JSP-au , im i 11 IK cmi pr-i ii<-«-» 
you fnmi some of the derails di.u (canity matter (and thai you'll be tested oajj so 
you're much beaer off developing tbc bean code compJetely by hand. Om you 
n all) understand wharfs happcdiag, y™ can nunc lo a (mi! ihai automates some 
of ihc scrvlrt/JSP creation and dcpLrjTnrnl steps, 11* yon already know how to 
use Ant, then after chapter !3, you can switch to LisiQtf il tn help you deploy, but 
wo don't recommend usinm Ant until after ynu'w completely memorized tlu- 
web spp dcjiloytiiPin xtructtiiT- 

GETTING TOMCAT 



■ If you donl already Java GE vis or greaief, you'll need it 

■ If you don't already have Tomcat 5, go get 11 from: 
http:frtonKiat.apache.org/ 

Select "Tomcat v5.5*i 

■ Scroll down to the "8 inary Cfetribudons" section and download (he version of your 
choice If you do not know, then select the 'Core' distribution, II ts all you need. 

■ Save the installation file in a temporary directory. 



For Windows, (hat means double-clicking Ihe install .era file and following trie 
installer wizard Instructions. 

For the others, unpack Hie install file mto Ihe place on your hard drive where you 
want Tomcat to be 

To make it easier lo follow the book instructions, name the Tomcat home directory 
'tomcat'' for set up a "tomcat" alias to the real Tomca! home). 

Set environment variables for JAVA_HOHE and TOMCAT_HOME in whatever 



Vou should have a copy of the specs, although, you do not need Ihem In order lo 
pass the exam. At the lime of Uiis writing, the specs are at" 
Servlel24 (JSR #154) http:'/jep.org'en'jsr/detail?id=154 
JSP 2.0 (JSR #152) htlp: '/j£.p.ofg'en'jSf/deta||?ld=1 52 
JSTL 1,1 |JSR #52) http://jcp,org/en/jsr/detail?ld=52 

Go to the JSR page and click on ire Download Page for the final release. 

Test Tomcat by launching the tomcaUbintetarlup senpt (which is startup.sh) for 
LinujdUnix/OS X. Point your browser Id: 
http:,'/localliost:8l}8G/ and you'll see the Tomcat welcome page 




Java 2 Standard Edition 1,5 

TofTtrat& 

Trie exam covers the 



■ Servlels2 4 

■ JSP 2.0 

■ JSTL 1.1 
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Last-minute things you need to know: 

This is a learning ^spefjtsaer, not. el ref e rence book, We deliberately stripped out 
pvwvtliinjf thai miifUt ffri in tlic wnv of fjwr»i«if wtwrtpvw it i« w'n™ working mi at (bill 

]Kiiiii in dii' hnnk. Ami ilic lii>i time ihmu^h, yon m ed to begin ai the begmiiiitK. 

localise 1 1 |r: hnok TflrtktS assumptions ahnttl what YiUl've already seen and learned. 

We use simple UML-Jike diagrams. 

Altlnniuli theheVa good chance youabeady know I'MK ifr omerbd on theejcwn, 

and it's 001 a |ii'nin|Liisi!r lor the book. So you whim haw la worry about [caroiRg 
senleK JKRJSTL, am! UML nl the same lime 

Wc don't cover every single picky detail from the spec. 

Tin- rxiim (.1 pn-i i detailed, though, .md mi are we, Rut if ihcr<v. a detail in the 8J)*C 
that's imi covered in the exam, we don't <alk about h unlea it's important to most 

component rltrvdiopij]"!!. What -yon need lo know to begin dcvcloplngwch components 
I'sL'rvlets and JSfis), and what you need lo pass the exam, overlap aboul 85%., We 
cover a lew tilings not nn the exam, but wl- point them out so you don't haw lo try lo 
tnemonxe them. Wfe cheated the nst/ exam, w Wfc know where poo sin mid torts yaw 
energy! ff there** a chance i h hi this one pidty detail Hughi lw an one quesiiOH cm the 
exam, Imi the efibrt to learn it isn't really Worth it, we might nkip it, or cover ii only 
very lightly, or only in a mock exam question, 

The activities are NOT optional. 

The exercises and activities are not add-on*: they're pan ol llie Core content of the 
book. Some of them aw BtCTC to help with memory, some Ji» r umlerjlamlinu. xmu- to 
help you apply what yoii'vr learned. IMtt «fy*S»® 

The redundancy is intentional and important. 

( )nc thing that** distinctly different in a Head Fifsl hook U thai m WmtjM k UNUQJp 
..-tith-vft it And wi' warn you i" finish the book nwHfM^d^what ynu\'it foartwtd, Mn?.i 
information or Deference books cton'l iwstMarfl} have retention and recall its a goal, kit 
in this ixiok youli see anic of the same concepts Come up more than once. 

The code examples are as lean as possible 

Our readers tell its iIku ifi B*U9tcattng in wac|*s through 2i\i1 liittrs of cixk' Looking 
fire the two lines they need to Under^Uind. Most examples in this book arc ihoWtl 
within the smallest pt K^ible context, tt) that the part ytiu'ne Uryiii); to learn is clear and 
5.jm|jk'. Don't expect the code to be robnsL, Oreven complete. That's juur assignment 
for alit-r you finish the hook. Thf book exarttplei! are written specifically for teaming, 
and ateti'l always fully funeiiunnl. Some of the code examples for the book arc 
m ail. d ile at www . headfirst labs . com, 
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About the SCWCP (for Java EE IS) exam 

The updated KCWCDoxam ht e ailed "Sun Certified Web Component Developer for the Java 
Ptofoirtlt, Kniei prist Edition r >" [GX-31O-085), but ttoift get confined by the ritlt-. The updated 
exare nsiiII iJen^gned forjavn EE vl.-i and for the seiviet v2A and JSP v2-0 ^ecificatiot* 

Do I first have to pass the SCJP? 

Ye* The Wan Gctrnpt-nttvi 1 tevidoper esam, the Business Component Developer ex.m.. The 

Mobile iXpjjlKMlimi 1 >■ - - - 1 i ■ | ■-. - 1 exam I in Well Serviees, Developer CSilTll, mid die L>'vc|ii|M-I tviin 

all require wu Id be a Sun Certified Java Proirraiiinier. 
How many questions? 

Vi ni'Il gri fj't questions when you lake the exam. Not everyone gets the same bfl questions: there 
are many diilercnt versions of the exam. Hut everyone gels the same degree til dillicultv, and the 
same balance of topies. On lilt* It-ilJ exam, expect to See a1 |eas1 one i|lleStion lit ill. iml h e\aui 

objective, and th«c an- a few objectives where you'll get iwrrthtt one question. 
How much time do I get to complete the exam? 

You lt(-i three Imtiry I IHO minuics}. Moil people <l<>n'l find (his hi he a problem, because <ln**e 
r|in"!iH>Tis don't lmd themsrhw |i> Inns,', rompliciled. puzzle?. Must questions ;in* very short and 
are multiple-choice, and wiu either know the answer or you don'l. 

What are the questions like? 

They are altn< <>i < -x.n tly like < mi m< >ck exam questions, with one big dilfercnce— the nai exturi tells 
you bow many answers ane ninvci. when we do not You will see a handful of drag-and-drop 
r|Ur"fiMiii\ hi n\ ever, lli.n \\r ean'i do ben-. Hut i Ir a^and-dtrip questions are jusHlie imera< liw way 
of matchiDgOfK: ihiiig lo anniher- 

How many do I have to answer correctly? 

You must gel P» (j nest it mls coned i7d%) 10 puss ilir exam, When you finish answering all or ihr 

ral ■■Liif-i.nw nnU iii^iit Fnmiin nippjip mini- iku njLFm kullnn imlil U-n ui lUn /■Hiii-.am nli ill- il 

UUCaULIJtti lllllTI "l l I L IIJLtliai lllinil UVM llll. IJLJJIl. IMILIL'll LUJIII VVU Mil'* 'II 1 1 LfUI42£l I ' • S I L\ J\ 1 1 . 

Because in, like, six nanoseconds, yuu'B know whether you passed (of course you ii i'' 

Why don't the mock exams in the book tell you how many options to 
choose for the correct answer? 

We wnnl mil exams io be jus) a tittle more difficult than die real exam, to gjye you the most 
reali-iijc lure of win-Tim - you're ready to lake rlie exam. People lend to get higher score* on 
bfrok mock exams because they retake ibe same Icsl more ilian mice, and \\f don'i wain yon in get 
a false picture of your readiness lo Hike the exam. Readers have reported th.it ihe scoir they gel DC 
die real exam is very close to the score they get on die mock linal exam in ihis book. 
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What do I get after I take the exam? 

IScli nc you leave the testing center, be rare to get your exam report. It shows a summary of your score 
in each major area, and whether you passed Of (ailed, A™/ 1 tSur/It's your initial proof thai you've been 
■ 1 1 liin il. A lew weeks ;<t r 'T the you'll (jet a little package In mi Sua tktocational Service* thai 
nu ll ii Ii-- your ml printed certificate, a coa^atutoiuns letter lit mi Sun, and a tnwSy lapel pio that say? 
Sun Certified Web ( 'ocnpotletll Developer in n Ibnl so incredibly small thai you ootlld pretty much 
r laim to be rcriilicd in anything you like, and nobody could read it to tell the diflctence, Ii docs not 
include the alcohol you'll be wanting alter you pass the exam. 



How much does it cost, and how do I register? 

The exam costs U.S. $^KJ, Which is why you need this book... to maJut sun- vuu pass ihr lirsl lime. 
You register through Sun Education.! I Services, fry giving them your credit card number, In exchange, 
vmi'll jet n row-far number, which you'll use to schedule an appointment at a Pmmetrir Testing Center 
nearest you, 

To get the details online and buy an exam voucher, start at: http : / J www .sun. com/training/ 
certiflcat i on A If yi in the US., you're all set. IT you're not in the I LSL, you can select a 
country li i mil i lie right menti bap 

What's the exam software like? 

It's dead simple lo list- yoti gel a question, and you .mwrr it. If yoti don't want to answer it. you can 
skip it and conir kick In it later. If you di > ttitsWCT it. but aren't sure, ami ymi waul i< i conn* back lo il il 
yoti have more lime, you can '"mark" a question. Once you're done, you'll see a screen thai shown all of 
the questions, you hadn't answered, or have marked, so that you can go back to them. 

At die very beginning of the exam yi m'll gel a short tuteuiiil cm how to use the software, where you get 
a little practice test (not on Servlefcil. The OHM! you Spend in the tutorial dues not count as time spent on 
the SCWlID exam. The i lock doesn't sutft until yonVe finished the exam software tutorial and you're 
read) mi In-gilt. 



Where can I find a study group, and how long will it take to prepare? 

The best online discus*k>n group lbr this exam just ha] i| iens n > lie the ortr that the authors moderate! 
(Cosh, what are the odds?) Stop byjavaranch.com and go to the Big Moose Saloon (that's where 
till the discus-iion lorunis uiv I. W >u can't mis* it. 'lliete will always, be sotnfont there lo answer your 
CjUi aLms, im Ind'aii; i^.Jav.i Ranch is the ft inidlirsijav; iiuiuin on tin- Internet, myt-u'rr- welcome 

no matter what level you're ai withjai u. If yoti still need to take the sqjR iwTI help you with that one 

ILKJ. 

Bow long il Cakes you I0 ,ge( ready for the exam depends a V>\ oil lluW much Itfvtett and JSP 
experience you Ye baa, If you're total to wrvlcts and JSR yuit might need anywhere front (i to \2 weeks 
depending on In iw much lime yon can devote to it each d[iy. Those with a lot of recent sen-lets and JSP 
experience can often be ready in as little as three wet'ks. 
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Me early review team 



Seta testers £ technical reviewers 



Not pitted CUt 
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Other people to bt^e: 

At O'Reilfy: 

G«r btggesa thank* ta Mike Lou It ides m ( TRdllv; Cif Jtarting it aH, and 
helping us shape ihr' Hfiid First conc^pi into a Herws, Ws few? Jiaviufr ;m editor 
who is a Real Java Guy. And :i big thank w the driving force Ijehind Head First, 
Tim O s RciUy. Lucky lor us, lie's always dimkingahotu the future, and enjoys 

freinga duraptivt inihienee. Pbankt to this ctrverHead Fvsl "m im - n" Kyle 

Hirl 1 1. 1 figuring out bow Hi'iiel Funl fits into rheresl oi" die computer hfx.ik 

Our intrepid reviewers; 

OK, Mtilic book riHfk:i little longer than we'd, planned. But iviiluiutJiivaRinuh 
r.-. 'm'w manager Johannes dejong il would havr hem Kdrih lair, Ysui itrr (rt» 
bcro, Johannes, Ami our special thanks Its Joe Ktmior, whose feedback on each 
chapter Was pretty much the- same siit as the chapter. We deeply appreciate ihe 
reLctnlujs ellbrt arid expertise land eheerfnlneisj) of Philippe Macquet. .VII 
three of die authors love him so much we want in marry him. ..hut ih.it wonlil 
be weird, And w'rt - w\ ^nneful In Andrew Mnnkhmisn? Ebj Imth bwtmlcal 
Ibedlwck d»f I»lp with «t«tle En^h-to-Auttr*diai5 Iranslalinns. Jd* 
Gumps, yLnir MP!J rendition ol 1 1 1 ■ ' "-h! I'-.nli-r " -^iil; was lerriJir {except lor 
maybe being a bil rmoK and your technical comments were rtoltj helpf ul. 

Da vi' Wuud bamntered usjert <\ti vthin-i. and was Ibjid of pointing ii»e;jily 
pages and Raying ""/7ws7 V ncM very Head FliMy." We also pit sonic excellent 
Feedback FrumJavaRanch moderators Jaison Menard, Dirk "fish fare" 
Schrecltmann. Rob Rossi. Ernest Friedman-Hill, .uid Thomas Paul, 
And as always dumb cspcciidly to thejfflaj5mch.com Trail Boss. Paul Wheaton, 

Special tlianks tu the Ihllowing terh reviewens lor [be second edttjnfc: Bear 
Uibcauli. Theodore Casser. Uli" Dirtmer. Pre-ettah Madalia Sergio 
Ramirez. Oliver Rut-ll. Neeraj Sinebal. .limI Collins Tchoumba. 

M, lt <k Ex,.**, Q*t#*>ti*,*t* 

If you jiiul yourself banging your 3 ic.il I qvi i .1 pai tk ulaHy twtyty of lurn-v 
JSP rtlock question, don't Maun 1 n* blatne Mure feabodyi Tlittnk& Marc, far 
helping m keep M tin- SCWCD candidates on tbefr tofflt Marc spends 1 upiinis 
ambuntkCif his free (inie nKxtt. rating at JavaRaurh, where he has been known 
to incite ranchers to construct horrible mashups out of innocent J.i\a EE 

HH h]l<ilo^k>. 
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From Bryan Bfusham 

I could ss&n by dianking i[i>' Muni, bin that** been tkme bd&ffc.J/Cy knowledge of Java 
web development is founded in a i'cw medium-scale applications thai J bssve written* bui 
that foundation was honed arid refined by years of debate on a Java instructor email 
alias jjiti-i nid to Sun In pai tii nUir. 1 would liko w thank Stew Stelting. Wmr fours, 
Lisa MaitisJeajT .Tnrf Mia, Michael Jin Id, I'amu I n .v k=i. and Keith KatJiir. Tht-if wete 
ui.mv people thai carved my bunvledge, but these six have bent tin- knives thai have cui 
nit- the dtfp&ti 

As with all hook projects, the lust three months were pretty difficult. I want to thank my 

lirtoff, Knihy Collina, Fbi 1 being patknl with mr. I vsmt to (bank Kama and Kiwi 

rats! for tin- late night setsicBW of hp-siuiiif; and keyboard troiim-jug. 

LimK. and most importanily I rin^i ifmnk Kadi\ .nul Hen l< n i-vni sunu,t-,rfn^ dial 
mv lake mi (his project. Kalhy Sierra is imly unique in ilir vonlo", Hit knowledge ol 
mctacthgnition and instructional design is matched only l>y her creative juice that pours 
nut ol" her Head First books. I have worked in education for five years now and I have 
learned neatly i-veryihinu I knou (inm Kathy... Oh. doti'i worry about my Mom; she 
will gets bin (lidii-.itiiui i y nesrt Bead Rrat book, 1 W yrm. Mi mi! 

Front Kathy and Bert 

l"hai was so mushy Bryaii»jpr;. iNot thai Kathy doesn't appreciate the sinking up. i \\'<- 
agree about your ftance, though. But it's nol like she miuerf you. < ml playing Ultimate all 
hUtnmiM' long while were working like dogsai our Kwerbuoks. lint you ivallv wade 

illii .1 i ■■■.v.i ri I ii i j '■■-.]•' n=' Ui wh i I you're die best' io-auilmr we've ever had! lt\ 

almost frightrriing how calm and happy yon are it ft tkr (nn& 

We nil appneeiate lhr L hard-Worfcinrr Sun eS;mi rerliliealinn l earn, rsprci.ilK Java eerl 
manager Evelyn Cartagena, :uid wr thank all 1 1st 11 ifks wit- ■ helped develop iheJSRs lor 
the Sen. let and JSj j specs, 



"The large numb* of MlBM-A-lRdg-rienK is bccii« .ve ib lettng (he IhMry 
that everyone mennonid in a booh acknowledgment wH buy at toast one espy, 
c-mbably more, wha! >*ith relatives and everything. If you'd like 1c be in the 
acknowledgments of our nstf book, and you have a Earge family wile to us. 

'Poin! of clarification: Bryan is the anJ)< co-author we've ever had. bul tiiat in no 
.-.ay a - ••*D»s :he mien 
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1 Intro and overview 



Why use Servlets & JSRs? 




Web applications are hot. Sure. GUI applications rrnght use exotic 
Swing widgett. bui hew many GUI appt do you know that ars u&ed by millions 
cf users worldwide? As a web app developer you can free yourself from the 
gnp of deployment problems all siandabne apps have, and deliver your app to 
anyone with a browser. But to b-mld a truly powerful web app, you need Java. 
You need servlets. Yqu need JSPs Because plain old sialic HTML pages are so. 

tailored Within these pages you'll learn to move from web site to web app 



ihi& la 3 fiew chapter 



1 



official Sun exam objectives 



Servfets & JSP overview 

1 .1 For each of the HTTP Methods (such as GET, 
POST, HEAD, and $0 on> 

* Describe benefits of the HTTP Method 

' Describe functionality of the HTTP Method 

" List triggers that might cause a Client 
(usually a Web browser) to use the method 

Also part of Objective 1. 1, hut not covered 
in this chapter: 

■ Identify 'ho HttpServlet method that 
correspond 5, to the HTTP Method 



Coverage Notes: 

Thf objtrtH'cs in this stftion (ttf cevrmf 
fompletfh in ttnothtr rfoipter. so think of 
this iiwfittr at ti jirst-lnok fotindiition for 
wluit ftmm fain, hi at her wards, don't ;vony 
fif'tmt jiiu\itwg this rttnpUt ktuni'tng (run! 
trmant/rritrgj fttivthing \pr(tJi<jrotn ittrst 
nbjrrtivrs; just use it for background, If you 
nUcadr know thtsr lopta< von ran jusf slum 
this ikapUf and jump to chapter 'J. 
)i>u ivoti't hmt any moi-k nam <f nations ow 
them tapin until yau jtfl h Hit mart spmfi? 
rtia-pkr ti'hm thost topics aw 
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intra isnl architecture 

Everybody wants a web site 

NV>li have it killer idea for a wrb sit*. "Rj destroy the competition, you 
need a tkxibki tollable ardin>Tiinv. Ynu nerd swim and JSP*. 

Before we (tail building; let's take :l l |!<1 ^ ;t| the World Wide Web 
limn .ilium Mik fi"rt. Wh.u \w r;irr imt-i LiUmr in rhts chapter ar* 
how wrrb clients ;ul<J wrbsenrrs laLk I" 00* another. 

These next several pages are prubablv all review for you, especially if 
you're already a web application developer, bui it'll give us a chance 
in i x|n^.r ■ i| ill-- 1 1 niiiniilim'v '■■><■ mm ihrr>ugh<.iui iln- lunik. 




TVe web t^^t* °f * 
.^t^ browser* Ife 

£aW> ard HTve« c «'"5 
W |fi|c< Apd«> t««tt*d 

*«.nd till ^ M " **** M 



1 Client 



Client 
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web -isrver 



What does your web server do? 

A web server takes a client request and gives 
something back to the client. 

A web brawfti lers a user request a mount* The web server gets the 
request, finds the resc»urcL\ and returns something to ihc user. 
Sometimes that resource ls an HTML page. Sometimes it*s a. pidure- Or 
n .toumi Or even a PDFjiocumvt Hoi-mu twMu-r the dient asks 
fin iltr iliinu uminiti' ;nii I 1 he sfiwr se nds. ii hat* k. 

I "ijm m rtr«g i.SflV fAcfr, Oi jit Ii-:ls< ilV ui>r w|n-iv the servej is 
ejecting it in be; Ifou'fle of course quite familiar Willi the "4ttf Nur 
found* error- the response you get when the sesrvct mn'i End wbal ii 
I liinks you asked lor. 

When ivc say "server". We mem filhtr the physical machine ihardvcmei 
or thr web server Application Isoftwnrej, Throughout the l"'"k, ii' 
the dU^tetice between server hardware imcl software mailers, we'll 
explicitly say which une I hardware or software! we're talking ubout. 



The tfatft rpyab cortam* th e 
and add«« U%U, *f 




let* *f 



.r I 
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intro ami architecture 



What does a web client do? 

A web client lets the user re quest something on the 
server, and shows the user the result of the request. 

When ivr tM&k about rtirrttx though, wr usually mean botl ■ cither) ilir 

human user and ihc browser npptitalivn . 

The browser is the piece of software (like Netscape or Mozilla! lhai 
known how m communicate with ihc server. The browser's other big job 
is interpreting the HTML code and Tendinis;;- the web pa^c lor die user. 

So Irom now on, when we use the term client, we usually won't care 
whether we're talking about the human user tir the browser ap[>. In 
oilier words, the iHtut is the bruw.w nfip thing .i'fstti tltt tan tukfrl it to i!n. 




User 



Browser aets the HTML 
and renders It ii-ito a 
display for the user, 























1 






- 



Browser 



Server formats the 
response and sends it 
to t ha client (brows&r}. 





Server 
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HTML and HTTP 



Clients and servers 
know HTMl and HTTP 



HTML 



When a server answer* a request, 
ihf server usually tend* tome ivpe 
of < <j[|i,-til Ni ihf browser wi "Vi ihr 
hrnkvsrr <:;ni display It. Srvvi*is ollru 
-.t llil lipuvsiT -i ■> \ "| i\,-,H ii. I hi[is 

written in HTML, the HvperTexl 
Miiikup l..iui'.!i,i.L!' I'Iil' H'i'MJ. 
tells ill*- browser how ta pfesecH the 
cxmtcni m (he dot 

All \s'f\> Imnwrs kwiW wbil to (lit 

uli H'] M I , T iiiiinHJtrh nomt Cirri ef -ju 
oAta browser might inn understand 
pari* i»f a pat;c that Wan written itsin^ 
Hfwn vcrskim iff HTML 




HTML tells the browser 
W to display the content 
to the user- 



Mosl of itic conversations held on iIk- 

w<*h brlwrcn clients and scrvrrs nrr 
hcid using the HTTP protocol, wbii Ii 
allow* for simple requc*! atid re&pcmsc 

ctmv^rsadotK I tu- ctieni lend* mi 
HTTP it'<|iit'si, liikI i!l<- hfi-iri iin*»«'r" 
with hii HT TP response. Bottom Nth-: 

if jmt W a wi tm™ //777? 

When a: web serwr sends an HTML 
page to the i Iu-tii, ii sends it using 
HTTP. (VdtlTI lee the details tm how 
iill this Worfca in (lie next few pftge&J 

(F5tts HTTP stands For HyperText 
Transfer Protocol.) 



HTTP is the protocol 
clients and servers use on 
the web to communicate. 

The server uses H T TP to 
send HTML to the client. 
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intra and architecture 



Two-minute HTMl guide 



When you develop a web page, you hh*: HTML to iJcstrtb* what the 
p;i(jt* should Inok lib- ftttd dow it should behave, 

H TM L Iki-. thj/i-fLN i>J ffl^s ,L3nl I ■.iu i.bni attributes I In -n;il. 

iki" HTM), is to take ei Eeiti documeill (md add tags that ceH iln 1 brows*** 
haw to formal \\u- text, Below eu* the tag* we use in the oext several 
chapters. If you need a more uompletc under^andin^ of HTML, we 
]■(■<* immrnd (he honk it I ML & Xit IML Jht tkfmtkt' Gunk ■( )'knlh\ 



Tag 

<] — — > 
<a> 

<aliqn> 

<body> 

<hr> 

<c=nter> 

<forttl> 

<h1> 

<head> 

<html> 



Description 

whore you put y>ur ammmits 
(i/ic/nti - n>ual]y li ■! |>ultini> in n hypx iiiiik 
align the contents IHi. right, centered, or justified 
define ili>' boundaries of the ddcunwnt*a /Wr 

:i hmk - html ^ « 

OTi/sr the Contents ii^yler to «*d ito* 



J^e* t> k»» »™L Wf^J 

delink Tijhrm (which usually provides input fields} 



tpfi liiNt lewrf heading 

define' the buundttriea of the document'!) 



define the bjundarios of the HTML <unnmri>\ 



< input type> defines an input widget to a limn 



a new 



<title> 



the HTML document's title 
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writing STML 



What yoo write... 

(the HTML) 

Imagine you're ncjuing .1 Ingiit page. The simple HTML 
might look stmu- thing like this: 



The 



<html> 

<!-- S-ouie sample HTML — > 
<head> 

<title>A Login Page</tiiae> 
</head> 
<body> 

<hl align«"center JJ >Skyler ' 3 Login Page</hl> 

<p aligns" right" > i^" 
<imc/ stc="SKYLER2 . jpg" width="l30" heights" 150 "/> 
</p> 

tfarm action="date2"> ^ ^ 

Mame: <input type=" text" nanie="paraiiil" /xbr/> 
Password: <inpnt type="text" name="parani5- r 7><br/xbr/><br/> 



<cenber> 

<input typo-"SUBMIT"/> 
</ center > 



</fotm> 



fttl **rt Ao.t 

the m^i 3hjJ 
reiur* U L. J-l . . 

- - - «»• tnc 



The <bv> ^31 
line breaks 



w wtrtlr. 




" "...T. --- + 4 rr 

You need on/y the most basic HTML 
knowledge. 

HTML pops up all over the exam. Bui you're 
mil befog ff.ifrtiim yniti- HTML kiinwU-dge. You'll set 1 
HTML in (In- context of a Utge chunk of qucttion^ 
ihnisgh. -i' vim iirt-d :n Ic;im M.mir i<ir;i of what') 
happening wfoeu you jes MtHpit II I ML- 



- - 







.■ 
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intro and 



What the browser creates... 

TEe bSWlftCf l't:;i(ly tlli'oll^h fJ|t; HTML ('Vifjt:, ctwtes lilt' 

web page, tend trader > h id i hf uw r's. displ.sy 




® 



Skyler's Login Page 



Name 
Passwonl: 




HTTP protocol 



What is the HTTP protocol? 

H'l 'l'l 5 i mis on tap &f TdP/IK I!" yimip not liumli;,, u'iih 
those networking protocols; here's die crash course: TCI 1 

i'f?>pi nis>U»U" fitr making snr* 1 thai a 111*' smi tnun one 
network node to another endt U|» ;tn ;i complete file Lit die 
destination, even though the tile B split inlet chunks when 
it's sent. IP is the underlying protocol lhat moves /routes 
the chunks (paik< -ts • ['mm utn host Id another on their 
way Ui the de&tnatktb. H I "I ^ their, is another network 
protocol llinl Iuih WVb-spi'rihV ItatUriH, bill il drpnub 
on TCP/11 1 to <rri I lie complete requesi :tml response 
from one place Ld another. The structure of an H'J'TI' 
conversation is n simple Request/Response i-equenee: a 
browser tityttttttt and a setter resfmuJ.i. 



==Tii 

Web 
braver ll 



I tH \ 1 1 rr \ fo 

Client 





IH4 l-fe*«»l Hi--MJ-hJJ--tH - t + 4 - I t I- l-l I * *4 - - + + rJ 144 - -^l,H-ljj. |.+y ■ H - - I- H - h + 4 - - 1 ■ - - . 

You don 't have fo m em orize the HTTP spec, \ 

■ 

■ I . . HTTP protocol h n I EtF statidnixl liFC 2616. If you care, j 
romwatel^ the exam doesnt expM ynu uu Aparhe is an example of 
a Webserver that ptoteMc* HTTP rcqtratt. MozOb is aa example of 
.1 Web brow&rT thin provide* die user with lite meiins to make H FTP 
n'queats and n> view the documents relumed in the server. 
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intra architecture 



HTML is part of the HTTP response 

An ETtiP response ■ an nafefe HTML. HTTP adtls header 
inform ation tn ihe inp fif whatever mutant in the rrsjmnse (in 
oihct wordsf ths thing coming bade Bono iln' sit. rru An HTML 
Iwoytscr uses thai lu-adrr info to help ptocess iJir HTML page. Think 
of l lie HTML cabtfen! n* data pasted Iniide un HTTP rcsponjic, 




HTTP request 



Client 



HTTP *ridc* 

^'Splays the j.,,r 0, e 

Vtfhe* thr W-** ^ 4* a- 
■«j4|e t*> ^ yne^ate* a«T* er 
HTTP ****** y tine 

ttTTF «^e*fe 91 st the ^ e 
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HTTP mefftotft 



If that's the response, what's in the request ? 

The fir** thing ytui'll Bnd t* m H'\'\V mtth&d mms> Thew aren't Jess 
methods t>ul iln- idea i s wittta; The method name tetb the server the 
kind bf requesi (lint's l>cing ni;uU\ <itul bow ill* - rest of I lie rriessapn" will be 
formatted the l l'ITP protocol bu srvcraj methods, Inn <Ir* ours you'll use 
most often arc (-£"/ and P0St. 



GET 



User clicks 

a hnk to q Browser sends cm HTTP SET 




User Browser Server 



POST 



User types in a 
— i form and 1 hits the 
E Submit button. 




H 



"Jj 



Browser sends an HTTP POST 
to the s&rv&r gwmg the 
server what the user typed 





User 



Browser 



Server 
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GET is a simple request, 
POST can send user data 

GET is the simples) HTTP method, and its* 
main job in liii? is to aak the server to get a 
rewumt 1 and send ii Ij.u L Thai rrsouiTe tni^hi 
In- .in HTML |>;sgc, ftJUiG, a PDK t'tr. 
matter. Tin- point <>r GET i* tog*mmetbin$ 

buck from (lie server. 

POST is a more pewtfflil request, It 1 * Wkv a 
GET pit™ plus, Willi POST, you ran w/nro/ 
somelliiiifr and at the same time srrid Ibi m data 
to tht: scrvur [later in litis chapter ww'll itce what 
tlu 1 lervaf might da uiili that data). 




Sd what a bout the Other HTTP m ethod s 
betides GET and POST? 

A: 

Those are the two big ones that everybody 
usei. But there are a few rarely used methods (and 
Soviets can handle them) including HEAD. TRACE, 
PUT, DELETE, OPTIONS, and CONNECT. 

Vou really don't need to know much about these 
other* for the exam, although you might w?e 
them appear in a question. The Life and Death 
of a Servlet chapter covers I he rest of the HTTP 
method details you'll need, 



intro architecture 
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HTTP GET 



lt'« true,,, you can send a little data with HTTP &ET 

liui yr>u might n,jt Wiim to. Hi^son* you mjghl use l*OST instead of Lit- I' bdude: 

The [i>i;d aniourLi charactffts in fi (iET is really limited [<!t|3endkig 
on ihr server). If the user types, say, a long passage in la a *"5Citn.li" 
input ■ I a ■ - * iKT niir*hi n"l v^oil. 

@ I ho data ™ send with the GET is appended to the URL up in 

lln ImiUsri lui: hi H'll.Mi-Vri )■ in vir I i\ ■ \;i<ivi| U--U.- I .1 

passsworfl "i s <• other sensitive diit;i li* part of :i GETl 



(3) Because of number two al™T 4 the user can't 
hotikniark a form suhniksion il yr.ni use POST 
inxtrad erf GET. Depending on your app, ytui ma} 
in- may run nam imts 10 In- able to lumkiinik the 

resulting requcsl from ft term suhiniHsirjii. »ti exposed „p ^ ftT " " mtL *Qi «W 



^thew 







F^L IMrnml' hnjJI in— In. 



EStf" 1 



Bl— mm i n, «p* or n <m 113 C3 fO |J? 
HI every one I 

E want [□ prepa r e far l*rc iCWLD amX would llkfl to kna# wh'ch arod boaki vou B[lv\u mi, ipacjnlly Wat on ttw 
marta* Om booKi ttvar e*i« for this tt'Tintitlon m« f«ui en iti* SCWCD 1 J, no Hoe. v*i lot the «#« ,<rslsn 
5CWCD 1.4, and I'm planning to pj-si Iht rmw ucruiin ut rnr mam, ia ntuth oopd boot ] Mould Id ituOf on II * 
than, you In advance far nny iiu«n and advice © 



M «f wal >*¥ 41-111 
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intra .ma architecture 



Anatomy of an HTTP &ET request 

Thr path in ilu' rtMiun i", and any p<u-niiu*ter» added in die 

I Ul, .lie iin Imltil nil "iT-ipifsl lint'". 



******* 



***** 




i 



fester*' 



GET v s<?lect/ l jeleetBeerTflite.j^fi7cDtDr=darlcM3ste=ma|ty HTTP/1 . 1 

Host: www.wickedlysroart.com 

User-Agent. Mozilla/S.O (Macintosh: U; PPC Mac OS X Mach-O; en-US; rv:1.4) Gecko/ 
20030624 Netscape/7,1 

Accept: text/xmLapplicahon/xml,application/xhtml+)£ml.text/htrril;q=0.9,text/ 

plain;q=0.8,video/x-mn9Jmage/png,inriage/jpeg,ima3e/gifrq=0.2, , "/*;q=0.1 

Accept -Language; en-us,en;q=0.5 

Accept* Encoding: gzip.deflate 

Accept-Charset: ISO-8B59- 1 ,utf-B;q = 0.7 *;q=0.7 

Keep-Alive: 300 

Connection: keep-alive 
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HTTP POST 



Anatomy of an HTTF POST request 

l-l n P POST isqaesw suss d^jj&ei u, be wad by tlu- browser ks 
ui.i kj 1 complex requests on me sprveir; Ebr Instance; il" a tist'i 1 ha* just 
cnTiipktctl a fur id, die application might iv;irn all of tlif fni m - 
data ta be (uklcd m a database The data in be tern buck m ilir seicvesr 
is bin™ as ibe "message body" ar "paylond" and ran be quite large. 



The HTTP 



Tk 



The Revest 
head^s 
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POST /adviior^eleet&^rrnstejdtj HTTP/1.1 

iHost: www.wickedtysmart.com 
User-Agent; Mozilla/5.0 {Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.4) Gecko/ 
20030624 Netscape/7.1 
Accept: Ee)<t/xmLapplicaiiony')cml,application/xhtml+xml,textyhtrntjq=0,9,teKt/ 
pldin;q=0.8,video.^-mnqjmage/'pngJmage/jpeg,image/gif;q=0.2,V*;q=0.1 
Accept-Language: en-us r en;q=0.5 
Accept- En cod tog: gzip, deflate 
Accept-Charset: 1SQ-B859-1 ,utf-a;q=0.7,*;q=0.7 
Keep-Alive: 300 
Connection: keep-alive 11 l ^' P**" 1 ^^ *e down he 

the* m iht Rc^A 



f 



color-dark&taste=malty 




Client 



Server 
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Anatomy of an HTTP response , and 
what the heek is a "MIME type"? 

X'i« ihni Wf\f sft.'ri ilit* requests From the browser 1 1 » the server, leys 
[iiok ;n wbat l lie snirr sends hack in response. An HTTP response 
has Ixitli a header and a body. The header info tells the browser about 
tiie protocol being used, whether the request was successful, Lind 
what kind of content i» included in tin- body, fttt body contains the 
contents i I'm' t-xstmpie. HTM I,) for the bHWSer vo display; 



HTTP 
header* 



\ J 



the rtriuj 



The body boLd* the 
HTML, ar at^ev 
ion-tent to te 
rendered 



HTTP/ 1.1 200 OK 

Set-Cookie: JSESSIONID=0AAB6C8DE41 SE2E5F307CF334BFCAOC1 ; Path=JtestEL 



Content-Length; 397 
Date; Wed, 19 Nov 2003 03;25;40 GMT 
5erver: Apache-Coyote/1.1 
Connection: close 

<html> 



</html> 




The &»W-type KfJderli 
■* *» * "ME type TV 

UM« * that the fc^ «jj k _ 
t» e,*dee ,t 

*• ^ listed the 
look * Ue h«drr ^ 



Server 
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request and response 



AH the pieces. 
Oh 



• *- * 

CSS c cs 











HTTP/1 1200 OK 
Ssl-Coakie: . , 

^■?-JSn|s«bo<^> 

<-1 align-^nliK^BeEr Logn Page'-til-' 



S?«d 3 beer tyic arfcjy beer 



<html }<body> 

<hl 8lign-center>Beer Login Fage<7hl> 

SBlecC a beer type or buy beer 

making suppLi-B5?<:p? 

<input type=radiG nanie= select 

val'je=3elect> Select a beer<br> 
«: input type=radic nsme= select 

value=Buy> Buy supr.J_Us<J3r^<br-> 

< input typ*=SUBH!T> 
■</rc>riJi,'> 



HTML 




Client 



Beer Login Page 

Sclni j bnr \fyt nt <*rj bm natal wppfltt? 
9 Pun 



CW /oBfci 
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your pencil 



GET or POST? 

Far each descnp-ion circle ehher POST or GET 
depending on which HTTP method you'd choose 
for implementing, that functionality. If you think it 
could be either, circle both. But be prepared to 
defend your answers... 



POST GET A user is returning a login name and password. 

POST GET A user is requesting a new page via a hyperlink. 

POST GET A chat foom user is sending & written response. 

POST GET A user hits the 'next' button to see the next page. 

POST GET A user hits the 'tog out' button on a secure banking site. 

POST GET A user hits the 'back' button on the browser. 

POST GET A user sends a name and address form to the server. 

POST GET A user makes a radio button selection. 
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anatomy of a URL 



UKl. Whatever you da don't pronounce it "Earl: 

Wli' ii vciu gt-t u> lIu- V\ \n lIi^ acfom'iii du'tiiJiiiyv fJirtv'* ii Baffle fwn.« L'RJ, 
URL, URN. wtrere dnrs ii eftd? for iww we've xtninfr to focus on ihe URLa. or 
tlnifbrm Resource Locators, thai ytm knou and loves ['Any resource or the ^^ ■ ■ I ^ 
ttaa iis (.mil umc|ur address, in ilic URL format. 



Rcsou^rte- TV* rj^e of the 
iontent keiM revested 7T.ii 
£*,ld be ^ HTA?L * aje. a 
Met a* PD£ mwtej 
video, or anything else the 
s^-vfr "f"!* Ifce servi^. |f thi* 
af-tonal part of th e l^L .1 
<U «,i »«t * e b WW1 
W mden hi»,l by defa^ 



Frohotob TeJk the 
«r*er *hich eo^nitatiw* 

pvotoio! fin this tite 

WTTPJ will be ^ ed 

http: / /www. wickedly smart . com: 80 /beer advice/ select /beer 1 . html 



bit physical «»^cr yei/re LxJci^ 

■fpr Thu rvimr maps to £ Whl^ue 

IPaddren. IP address* 
numend jTid tike the -form "ji** 
iff-***-*}*" V"" «r. spei,f y ah 
[P address here instead of a server 
nitrt, b*t a server hAme rt 5 lot 
rosier fo r*i«£».k«- 



Path The pattb I*****' 

the mb-mmm&'+M* 

de^nbe *M ****** ***** 
or. t*< « rvw 



in 



,n,y 
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A TCP port is just a number 

A 16-bit number that identifies a 
specific software program on the 
server hardware. 

Y<mr iciin ih'i wis 'Ml I I 1 st'rvtT software runs im pott 
80. ThatVa standard. IT you've ^ni a Telne! wsrvcr, it*s 
running an pan 33=, FtP? 21. P<U J :S mail server? I I If. 
SMTP? 25. The Time server sits at 37. Think of ports as 
unique iilcixiiicis. A port represent* <■ logical connection 

[it ;i pirluukii pWe of sOftVArf rll 11)1 it) £ Oil the se-rVrT 

htttfwart. Thar** it. You can't spin your hardware box 
around and find a TCI* pwt, Rw one thing you have 

6553ti of I hem on a server (0 to H55'55l. For another, 
they dci Hot represent a place to piu^ in physical devices. 
They're just numbers representing a server application. 

Without port numbers, the server would have no way of 
knowing which application a client wanted to tunmeri to. 
And --un i i * 1 1 1 I) application might have i i s own unique 
protocol) "hink of lb* trouble you'd nave without these 
!■ (eodfi^er* What if your web browser, for example, landed 
h| the POPS mail server instead of the HTTP server? The 
1 1 tail .server Won't knoiv how to parse an HTTP request! 
And even if it did, the POPS server doesn't know anything 
shout serving hack an HTML page, 

if you're writing services tVrver programs-) (o run mi ;i 
company network, you should check with the sys-iidmins 
to lind out which pons are already taken. Your sys-admin-s 
ntigftt tell you, for example, that you cant use any port 
number below, Hfy, 30(110. 



for common server opplfeorions 
Telnet rjViTP 

— 




Using o« serve*- ivf per p ort 3 server 
lir nave up -to i"553t different server 



Ue TCP port mmbers 
from o to 1023 are 

reserved for well-ltnown 
services (including the 
R3£ One we eare about- 
Port Sol Don't use tkse 
ports ibr your own 
custom server programs! 



you are here > 21 



web site directory 



Pircctory structure for a simple Apache web site 

We'll Mlk iihh'c .iIxjlh Apache :lih I Turnout later, boi fin* now let's Assume tUa\ our &ttptc 
wdb site is using Apache (the extremely popular, open source web wrver you're probably 
already usinR.i. Wlwl wpukl ihe diieetmy siruemre look like for a web site eajfed www 
wiekedlyMiiarl.toni, hosthlg two application*, one giving skiing advice, and the oilier 
beer-related advice? Lninginc lhal ihc Apache application is running on porl 80. 

The .html pages are each marked willi a k'lter (A, U. C, Dl lor the exerti-sc on ihc: 
opposite page. 




\d&tffaf is ike de&Jt 
pije that *>ll be returned 
to a wer who key* 

M wwwwtkedlys»»*rt e«»/ w 
into nil brswKT- 




An Arathe «rver -ill as*»< 
tKjt 'Wot*' <« tKe dWtfW 
that a *ht m«* f a- all °± 
server's w«b Jlpptofe"** 



imitation! on 

tibia 



o 







r j 












1 o 


■ l.-r- | 




IndM.tol 



Index html 




The £olde« for 
the beevAd^ee 
afp two ae-toou 



seiectBeer.html 



Ah tut 
3"* the «ee 
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irpen your pencil 



Mapping URLs to content 

Look al Itie directory structure on the opposite page, then write in 
a URL that would get you to each of toe four .htm! pages marked 
with the A, B, C. and D We did the first one (A) for you because 
(hat's the kind of people we are. For the exercise, assume Apache is 
running on port 80. (The answers are al (he bottom of the nexl page | 




***** 




will cause the sewer to return to you the iratex.hlml page at location 





[ 4 t> } 


0 J | + 










Amazon eBay Vahoo! News'* 





will ouefe serverto return byultenfej.M pec* a; locabon 




< »■ 'MS + 



ft isji i •• -I.-- IP .'0i I !••«•.;■•:• I in * 1 © 
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static ■■■ 



Web servers love serving 
static web pages 




A static page just sits tkm in a 
directory. The server finds it arc] 
tods it back to the client as is. 
Every client Sees die same thing. 



to tjhc uM*0P* 



web server 
machine 




**** 

4 



<httnl> 

The current time is [ins«rtT±m#QnS*irrer} . 

</body> 
</html> 



IUi)ijiB^P3tas,V«|as,flqiAP¥i9^/mo3i.Eius/<p9piwAWM-a 
/aaMPVJsaq/una-peuisAipe^aiu-MMM -3 
,'S3!Apveu?!)iBAU0f)iJeujs^pei|3!MM*w 

.e6ed srwiAaid 0104 swwsuv 

24 chapter f 



mrro : architecture 



Put sometimes you need more 
than just the web server 




web server 
application 



another application 

i .server 
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when a web server isn 't enough 



Two things the web server alone won't do 

If you need just-in-tiine pages (dynatnically-ereated page* (hat don't 
exist before the request) and the ability ru write Aave data nn the 
server (which means writing to a Bte or database), you can't rely nn 
ihc web ncrvrr alone, 



1 Dynamic content 

'I'Jir well server application serves, only statu page*, hut a separate 
"helper" iippiM-aliini ill. il the Web server CSttl e<imitnihii ate with 

can build miii-suuk-, jusi-iti-iime pages, A dynamic pa^r could 

be .mvihinq; Irom n calaliig I" a tv<d>log <ir even jiis-t it page thai 
nmrkmily chooses pictures to display. 



When instead of this: 



You want this: 



<body> 

The current time is 
always 4:20 PM 
on the server 
</body> 
</html> 



<html> 
<budy> 

The current time iE 
/ irtjf crtTimcOnSarVrr J 

on fct»o server 
^/body^ 



Just-in-time pages don't exist 
before the revest comes in. 
It's like making an HTML 
page out of thin air. 

Tlie revest comes in, the 
helper app Vp^es* tibe 
HTML and the web server 
gets it back to the client- 



2 Saving data on the server 

When the user lubttntii data bi a hum, the weh server sees the town 

data .ind lliinks, "Sit",' Like I care?" T" pi-m ess thai form (lata, 
either lo Hive it tr> a lilc or database or even jusi in use il to generate 
the eesptmie pa^c, you need another app, When the vivb icrvcr acts 
a request lor a helper app. the Web nerve* assumes that parameters 
.lie iin-.uil l! ii ili.il ,i| .|.. V, I lie Wei) jeryi i h 411(1-1 over die paraitielers. 

and f-iven die ttpp a way to gen<™t*- a rr«poriw tu ihc extent. 
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The now- Java term for a web server 
helper app is W program 

Mtiti (. :c i ] pn^fBmi! ;m written oi Pet] w ripts, bun irvmy 
other latigtiaget can wurk im-hiditis f : - Pyiln.ui, ntul PHI 1 
(C'Cl s-iand 1 ! for Cummmi <i,uc^ny Intcrfiicx, and we clim'r 
cliiv why it's culled that.) 

Usiiitf CGI, be(tft hi)\v it mi^n unrk lor .1 dynamic wrb page 
th.n t»u the current server date. 



web server rtioehpne n^t 




User clicks a link that has a URL 
10 a CGI program instead of a 
static 1 



Client 




Client 



web Server mochine 




Web server application 'sees" thai 
Hie request is for a helper program, 
so the web server launches and 
runs the program. The web sewer 
app sends along any parameters 
Iran a GET Of POST. 



CD 



" Wtb it 



web server machine 



Client 




The helper app cortslructs Hie 
brand new page (that has trie 

current date inserted! and sends 
the HTML back to the server. 

As far as the web server is 
concerned, trie HTML from the 
helper app jsai 



web server machine r=i 



0 




Clie.nl 



The helper application is shut 
down, and the client gets hack an 
HTML page lhat has the currenl 
dale as part of its now-static 
content. 
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two sides. CQi and Swvtets 



Servlef s and Cfrl both play the rote of a 
helper app in the web server 



Listen in a* out iwn blm-k belu discuss tb« |m>s 
arid i &m (if Ctrl and Si-ivlt-is, 



CGI 




Servlets 



GGI n lifiicr than Servleis. We writ*- CICrf scripts in 
Perl ill our shop, became cvctybody ItnOWt PrrL 



I gU?** thai 1 * fun- il' win use Java, rinre you ktmw ii. 
Rill lt*i i ni.iinh wOrth i' fo* W to switch U}JaVsL 
Tlicri-"*. ii" advantage. 



Vou challenge me? On ivh.U grounds? 



ThU is. no dillerent from Java... whai do yon 
eantkeJVM? Is noi every hwtance «f the JVM a 



I sec you bswe forgotten much. Web servers now art- 
able to keep a linfrle Perl program running between 
I'lipnt rrn 1 1 rsl s , No the ndd! Menial ovrrhe.id .nmiinif iil 

is WDitthles*, 



What ate you talking about? Air. * ( tkb\ , ■-.itijili.ini 
thin^ caii be aJ2.EE client. 



Stop t*tn late for jay Pilsiies class, Bui this is goi 
owe We'll havu to finish it latcc 



] donbl Kni'twlt knows Perl, I like Perh bm we'rr ^91 
Java programmer* in our shop s<i mv prrli-r Java. 



With much reaped, master, there are many 
adv.miaftes in using Java QWT Perl for the things ypu 
waul ft'i dnt Willi GGt, 



I'ci'iiii'iiiam r. |iir one thiiiij. Willi Pert, ihc server h;is 
to launch a heavy-weight process for each and every 
request for that resource! 



Ah, yes. hul you see ScrvJctS stay loaded nud client 
requests lor a Servlel resource are handled as separate 
thtWitl of a single running Srrvlel. Tlieii'V no 
overhead of starting the JVM. loading ihc class, and 
El ilia l.... 



1 have nert forgotten, masier. Bui ii is inn all web 
(servers that can do that. You are talking abou I a 
special case which doe* not apply to all Perl CGI 
programs. Hut Servkti will always he more efficient in 

thai wajl Aljd tet'f HOl Iot^i-I thai :i Srrvlel i an be il 

J2EE client, while a Perl CGI pr© greet] cannot 

I do nol niuuii a client in aJ2EE program. I mean a 
client that u J2EE. A Kervlet runniiiK in aj2EE web 
contain** can participate in security and transactions 
liulil alimu with i-iil i i | n isv lican> anil ill- re arc 

to be continued. . . 
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rpen your pencil 



Request 
Response 

Fill in (he boxes with 
a description of what 
flappers during thai step 
in (he process This is a 
■jLiffetfjc-fpage ir s-:> 
■ivtien you're finished. 
Slip back to thai page Jo 
compare your answers. 





i 




GET fl»a«1 fflBBrt .html HTTP/1.1 
Usa»-ftg»ni- M<"^ 50 iManniD*.-. 





Server 



>Peei login Paget. f\\\> 



V 




HTTPM I 2C0 OK 
Set-Coofcte. . . . 

««*nl><to(ty> 

align=senlijf s, Becr Logn Page-='ri1» 

i? cc! a bocr Uz< or buy beer 



<html><:body> 
< fornix 

SeLect a beer type or buy beer 

mating 5uppli=3?<f> 

Onp'Jt type=raiiio name=3elect 

val-Je^Select? Select a beer-Cbr.'- 
< input typB=raiJiD nanie=3elect 

value-Buy > Buy 3upplies<br><cbi:? 

•einput type-'5UBHiT> 
</center> 

t .■LP' - 




H«er Login Page 
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quickie took at servtets 



Servlets Pemystifred (write, deploy rim) 

Jusi s$tho6£ tt&vs toservlets can stop holding their breath, bet c'a .1 quick 

guife ta writing, deploying, pud rmmiim .1 -<t\1i i. I hi- niii-ln < iv.nr 1 

quesUoiis than il answers— don 7 pimic. vmi dim 1 bave to tk this riuiu 
nuw. It's just si quick dt'inoristnilimi for thus*- uhu cwh wak. The nest 
chapter iiidudts a mure thorough tutorial 

Q Build this directory Ires (somewhere not under tomcat). — — 

Write a servlet named Chi Serylet.jaua and put il in the $rc directory (to 
keep this example simple, we aren't putting the servlet in a package, but 
after this, ait other servlel examples m the book will be in packages). 



prajactli 

lbt[ I 



wnbuml 



import j avax . servlet . *■ ; 
import ^avaij.iaervletL.http.*? 
import j a va . io * * ; 



public class ChlServlet extends HttpServiet ■ 

public void doQet (Ht tpServlet Request request, 
UttpServletRespanae response) 
throws lOException ( 




(i^t «.il b e ji>*t *00 pini 



Printwriter out = response. qetwri Let () ; 
java.util.Date ttwiay = new java.util . Date < ) ; 
out,prifiUnr<html> * + 
"<body>" +■ 

"^hi allgn=carjter>HF\' s Chapterl 3ervlet^/hl>" 
+ "<br>" + today + "</faody>" + 1n </htinl>") ; 



Q Create a deployment descriptor (DD) named web.xml, put it 
in the efc directory 

<?xml version'"*! , C\ " encDding-""Isu— bti5i-l" ?> 
tweb-app xmins="tLttp : // j ava ■ sun . cam/ xml / ns Zee" 

x^l]ns:xfii="http://www,w3.Dr^^/2uUl/XMLSche^l.a-J.nstancfe' , 
xsi : schema Location="http: / / java . sun . com/ xml/ns / j 2ee 
h t tp ! / / J a va . s ui i . cam / jtml / ns / j 2e e/ weto -a pp^ 2_ 4 , sts . J " 
versiun="2.4"> 
•;servlet> 

< servlet -name>Chapterl Servlet- /servlet-naine> 
<servlet-clas£ >ChlServlet< /servlet-clasa;* 
<! servlet"' 

<se r v le t -mappi ng> 

■servlet -riame >Chaptar 1 Sarvla t< / s e r v 1 et -name> 
< u r 1 -pat tern- /Servl < / q r 1 -pa 1 1 ern> 
< / servlet-mapping> 
</web-app> 



^ DD ^ a TT V.iab«- 
-A DD *» deeJare-a^ 



3D 
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Build this directory free under the existing tomcai directory... 
^ From the projecil directory, compile the servlet... 

f^javac -classpath /your path/ tomcat /common/ 1 ib/ 
3 servlet -api, jar -d cLass-ea src/ChlServlet . java 

/ (This IS j|| ,vr,f tcmmird) 

(the Ch1Servlet.c!as3 file will end up in , 



Q Copy the Cn1 Servlet. class file to WEB-iNF/cfasses, and copy 
the wehjcml file to lAEB-fNF 



From the tomcat directory, start Tomcat. 

%bLn/startup.sh 



r — i 

tomcai 1 
I 

m 

S Webappsl 



Th< nAnt of 




T 



AfEB-INF 

T 

— 

classes 



Q Laun ch your browser and type in ■ 

http://Iocalho5t;80aO/chly'3ervl 

it should display: 



htTp://tocalhost:8{JS0/rhi ,'Scrvl 
C I p+1 0hrtp //lucalho&t SO ~ Q, 



DQ Apple Mat Amazon clay Vihtml Naw&T 

HF'k ThsintPrl Sprvl^t 






PI ! Ml 

in n ■ 

MD1 41 1 L 
iLLL am 



Tue April It) 16:20:01 MST200* 



^ 



Q For now. every time you update eilher a servlet dass or the 
deployment descriptor, shutdown Tomcat- 



%bin/shutdown,sh 
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HTML in a printlnf) sucks 




Wo offense here. 

wrong 



iHSrC : 



but th 
SERIOUSLY 



rg 

with tKis 



servlets picture... trying to stuff 
HTML inside a print. n[)?3 That 
n't be right.., 



out. prints r<html:> " + 
n rbody>" t 

11 <b x>" + toddy 
"<;/body>' r + 
"■c/html>") I 



Login 
t 



Paget /hi'" < 



Actually trying to format HTML inside a 
servlet's autprintlnf) pretty mucn sucks. 

Tim Ss (nit? i)f the worst paru (nu» //jy wm if 
part) Off servlHv StnlTlnn property formatted 

HTML u^s bio the printlnf), juti to that you 
can insiTi tfttfobles add cncthbd caUt, is ju^i 
hnilwl. lfcm'l rvrii rtwrf .thmti doing anything 
the least bit soph istiat ted. 



It can't be fh-at bad... why can't I ju-st copy a 
urhnlp paqpnfHTMt frn-mf my wp-h fvigp prlitnr, llfap 

Dreamweaver, and pa*te it into the printing. It's 

fi&i EiSub I have tw tS Suit i& rciiu thS J udc in "ncif. 

A* 

£\ Obviously, you haven t tried this yet. It sounds 
good, Yes. I'll just make my page in a decent web 
page editor (or even a simple text fie would be 
easier ihan in my Java cod*) and then a quick copy 
and paste into the printlnti and venial 

Except you get about 1,378 compile t*tm$> 

Remember, you can't have a carriage return (a real 

O-hfr) inside a Siring literal. And while we're Lalkirin 

about Strings... what about all your HTML that has 
double- quote marks in it? 
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Oh if only there were a 
way to put Java inside on 
HTML page instead of putting 
HTML inside a Java class. 




She doesn't know about JSP 



<html> 
<bcidy> 

-;hl>Skyl^t' a Ltigifi £ 1 age</hl: 
<br> 

<%= new java.util.Hate() 

</body> 

</html> 

skyJerloqin.jsp 



&JSP page lfx>ka final like aa HTML page, csCflpl yoti 
«m ].nii.];n.t andjava-rekted things btficta the pafje. 
So ii really is lLke inserting a variable into your HTML. 



ISSfe of HTML ft 
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Java meets HTML = JSP 



JSP rs what happened when somebody 
introduced Java to HTML 

Pnninn ,f;ivii lulu HTML b a kblutkm for two timer. 



1 Not all HTML page designers 
know Java 

Ajip developer* know Java. Well page designers know 
HTML. With JSL Java developers can do Java, and HTML 
developers can do web paffes. 



Formatting HTML into a String 
literal is REALLY ugly 



l J uiiiim even marginally complex HTML into the aiguntpm to 
a ptintlm'i is a compiler error waiting to happen, You might 
have to <l" ;i ion pf worl to gei the HTML formatted properf) 

in A Waft llwl *'ill Votrk-i in llir < Tin it's browser, yel salisfirs 
Java rules lor whal\ allowed in a String literal. Von can't have 
carriage returns, for example, yet mosl o( the HTML you'll 
pull Irorn a web jiage editor will have real rajrmge re l urns in 
the suture. Quotes can be .1 problem too 1 a Iot of HTML 
tags use quote* around attribute vahicjj Tor example. And you 
know what happens when the nmipiW sees <i double quote... il 
1 (link*. Tim musl he llu* end of I lie String literal. " Sure, you 
can go back and replace each of your double quotes with escape 
codes.,, but it all grjtjt insanely error prone. 




Wait - there's still something wrong here! Benefit number 
□ n e ia ys " N ot a i I p age d esig n ers k now J ava , but the HTM L page 
designer still has to write Java inside the JSP page!! JSP lets the Java 
programmer off the h oak tar writing HTML, but it doesn't really help 
the HTML designer. It might be easier to write HTML in a JSP rather 
tha n in a p ri nt I n \ }, but the H TM L d evel oper sti II ha 5 to k now J ava- 



Looks that way, doesn't it? But with the new JSP spec, and by 
following best practices, the page designer should be putting very 
little (or no) real Java into 3 JSP. They do have to learn something , but 
it's more like putting in labels that coil real Java methods rather than 
embedding the actual J3va code into the page itself. They have to learn 
JS P syntax, but not the J ava I an g u ag e. 
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BULLET POtHFS 




■ HTTP stands for Hypertext Transfer Protocol, and is the network protocoi used on 
Ihe Web. II runs on top of TCP/IP. 

■ HTTP uses a requesi/response model-the client makes an HTTP request, and the 
web server gives back an HTTP response (hat the browser then figures oul how to 
handle (depending on the content type of the response). 

■ If the response torn Hie server is an HTML page . Hie HTML Is added to the HTTP 



■ An H TT D - equM includes the request URL (the resource ihe clienl is trying- to ac- 
cess), the HTTP method (GET, POST, etc.), and (optionally) form parameter data 
(also caltedthe "query string"). 

■ An HTTP response includes a slams code, trie content-type (also known as Ml WE 
lype}. and ihe actual conientof the response (HTML, image, etc.) 

■ A GET request appends form data to the end of Ihe URL. 

■ A POST request includes form data in the body of me request. 

■ A MIME type tells the browser what kind of data the browser is aooul to receive so 
lhat me browser will know what to do wilh it (render the HTML display the graphic, 



- URL stands for Uniform Resource Locator Every resource an the web has its own 
unique address in this format It starts with a protocol, followed by the serve? name 
an optional pod number, and usually a specific path and resource name. It can also 
include an optional query string, if the URL is for a GET request. 

■ Web servers art good at serving ctafec HTML pages, but if you need dynamically 
generated daia ;n the pace fthe current time, for example) you need some kind of 
helper app that car* work with the server The non^ava term for these helper apps 



■ Putting HTML made a pnntln(} statement is ugly and error-prone, buLJSPs soive 
that problem by letting you put Java into an HTML page rather than putting HTML 
into Java code 



res:crse 





is CGI (which stands for Common Gateway Interface). 
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2 high-level overview 



Web App Architecture 




ServletS need help. When a request comes, in. somebody has to 

instantiate She eervlel or a: leasl make a nev^ thread to handle the re-que&t 

Somebody has to call the servlels doPostO or doGetQ method. And. oh yes, 
those methods have crucial argumenls— the HTTP request and HTTP response 
objects. Somebody has to get the request and the response to the servlet 
Somebody has to manage I he life, dealh, and resources of the servlel. That 
somebody is the web Container. In this chapter, we'll look at how your web 
application runs in the Container and we'fl take a first look at me structure of a 
v.-eb app using t?>e Model View CofltroJIei (MVC) design pattern. 



this la a new chapter 



37 



official Sun exam objectives 



High-level Web App Achitecture 

1 ,1 For each of the HTTP Meth ods (su ch as G ET, 

POST. HEAD, and so on), describe the purpose of 
the- method and the 1 technical characteristics of the 
HTTP Method protocol list triggers that might cause 
a client (usually a Web browser) to use the Method, 
and identify the HttpServlet method that corresponds 
to Hie HTTP Method, 

1 .4 Describe the purpose and event sequence of the 

serviet life cycle: (1) servlet class loading. (2) servlet 
instantiation. (3) call the in it method, {4) call the 
service method, and (5} call the destroy memod. 

2.1 Construct the file and directory structure? of a Web 
Application that may contain (a) static content, (b) 
JSP pages, (c) servlet classes, (d) the deployment 
descriptor, (e) tag libraries, (f) JAR files, and (g) Java 
class files; and describe how to protect resource files 
from HTTP access. 

2.2 Describe the purpose and semantics for each of 

the fuiiuwiriy uSpiuyFTiErit. uSSCHpiOf clGrTiGrtS! 

servlet instance, servlel name, servlet class, soviet 
initialization parameters, and URL to named servlet 
mapping. 



Coverage Notes: 

All of tht nhjfttii'fs in this .tft thii arr coirrrti 
famjilttfty in other (hapten, so think of thii 
tlutpter its a jirst-!tit>k foundation for what 
fnmm tain. In fiihn wards, don't want 
about finishing this ftwpttt knowing Kind 
Tfmi'mbffing) anything ftaiju Jmm thru 
nhjrrfivrs. 

Inn won't hal f any mock exam question 1 ; on 
thtst topies ttutit uni get to tht mart spetfju 
chapter uthttf those topits ari wrnti; 

En/i'\ this oh<: umfitr. Inn hgwitnd mulrriul 
tfhiu xnts can! 

tiV'f. ..you do nefd to kno;v this stuff bejorr 
mating on. If you atrradj hare somt Ttrvttl 
r.\pnifHfe,yoti ran probably just skim tht 
pages, fouk at thr pUtutts. dit the txercisrs, and 

wtm m h cfaptti :i. 
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chapter 2 



high-level architecture 



What Is a Containe r? 

Servlets don't have a main 0 method. 
TheyYe under the control of another Java 
application called a Container. 

Tctnifiii ik ati example <T a Container. VVjiert your vn-h si'rvrr 
application (likf Apache) ^is a requeti fur a ftrvlft (as 

PpptNKd <<>. say. <i pJuin c »]< I Malk HTML page}* the KIWI 
h,<ii<ii the rcque*1 doI to the servlri iiwlf. hui to the Container 
in which the wrvlet is tifpfoyfd. It's the Container that gives the 
Bflrvlel tlic HTTP request and responsn?, and it's the Contain t>r 
that <. ,i\h [he w?rvlet"s method* ilikr il.?l J nsi or doGetQ). 
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fife without serviets 

What If you bad Java, but no 
servlets or Containers? 

What if you had lit write a Java program to 
handle dynaiuir rr(|l)esls llnil citine Ui :i svt li 

jervei application (tifce Apwlje; hut without! a 
Container likr Tomcat? In other words, Imagine 
there:'* no such (biltg as servlets, and nil you have 
art 1 the core j 2 S E Ebraries? (Of course, you ran 
assume vau have the capability 
of ccumgunjig the vela server 
app heat ion So (hat ii ran invoke 
your Java application.; UK il 
ynu dim' i yi-i know mm h ,i!ihiii 
what, thi 4 Container does. Just 
imagine v<m nr'ed server-side 
Mipp-jtt Tin 1 a weU application, Add 
all you have Ds pkitf oJ4jav& 



List some of the functions you would have to- implement in 

* Qreiit i wtket tetmedtion wrU tht server, And trtate a ln-tener W the socket 





■ iii.diuSrin'ui iuhujiu 'uijik . ulxUii ^[ 'IwciiVii •iiu|' i |i luj 



40 chsptw 2 



high-level zhitectunt 



What does the Container give you? 



Communications support 



We know thai it*s uV Container that manages and run* the 
servtet, bui wlj)?? Is it worth the extra overhead.- 1 

The container 

provides an easy way lor your scrvlets lo t?tlk to your web 
server. You don't have to build a Serve rSocket, listen 
on a pot -t. create suvaim, etc. Tie Container know* the 
protocol between ihe web icrver and itself, m thai youi 
wrvlei doesn't have 10 worry aboui BO Al'l between, £a$ 
ihe Apache we!; server and your own web application 
code. All you have to worry about is jtjur crtrti braine& 
logic dial goes in your Scrvlel (like accepting an order 
from voui online store). 



Lifecycle Management 



The < bntftirwsi 
controls the life and ch-aili of your se rvfct* It 
takes care of loading the clawe*, bstondating and 
initializintf 1 1 1 r- jcrvlets, invoking the srrvlct method*, 
and making servlcl inslanccs eligible for garbage 
collet-lion. Wish the Container in control, jr™ don't 

haw ta worn' a> much about neiourte Eaanageroent 



Multithreading Support 



Tht' ( loiitaincr 
automatically create* a new Java thread for every lervln 
request it receive*. When I lie servlrl\ done running 
the HTTP *i. L n nv method fur thai client's request, tin' 
thread completes (i.e. dies), This doesn't mean you're 
oft the book for thread safely — you can still run into 
synchronization issues. Hut having the server create and 
manage thread* for multiple request! ■-= r n 1 1 ^aieea you a loi 

of Wwik, 



Declarative Security 



Willi a Container; you 

git [o Use an XMI. deployment ilcsci iptni lo configure 

(and modify] security without having to hard»code it 
into your scrvlci (or any other) class code. Think about 

that! You can manage and change your security Without 
touching and recompiling your Java source liles. 



JSP Support 



You alreath know how loo| J.HPs, art 
Well t who do yon think takes care- of translating that JSP 
code inio real Java? Of course. The Calmer, 



TKanb to tKe Container, 
YOU get to concentrate more 
on your own business logic 
instead of worrying' about 
writing code for threading, 
seemly, and networking. 

You get to focus all your 
energy on making' a fabulous 
online bubble wrap store, 
ami leave the underlying 
Services like security and 
JSP processing up to the 
container. 
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the Container 



How the Container handles a request 

Wf'll gave some of jun u'i hits lor Una iti the book, but 
tiered .1 quick look: 



HTTP request 




User clicks a iink thai has a 
URI la 3 savlel nsteadofa 
sialic tmo 



CD 




Client 




The container 'sees' that the 
request is for a servlel, so Ire 



1> Ht 

2) HnpSeivletRequest 




die- it 




The container finds (tie cored 
servtel based on the LfRL in the 
request, creates or allocates 
a thread for lhat request, and 
passes the request and response 
objects to the servtet thread. 
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Client 




The container cans- the sen/let's 
serviced melhod. Depetidnng on 
the type o? request the service-!; 
method calls eiBier tfie (toGet() of 
doPost() melfiod. 

For this example, we'll assume Hire 
request was an HTTP GET 



Cfient 




The doGei(} meihod generates 
trie dynamic page and stuffs the 
page into the response object. 
Remember, the container still 
has a reference- to the response 
object' 



® 




The thread completes, the 
container converts the response 
object into an HTTP response, 
sends it back to (he client, then 
deletes the request and response 
objects. 
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sefvfel code 



How it looks in code (what makes 
aservletaservlet) 



I, tonal wrH 1^.4*^ 
et> doPostf) method 



insport javax.ServLet. *; 
import javax . sfervlet . http . * ; 
import java.iQ, 




| all 

^'nti^^ 



public class cbaservlet extends Httpservlet { 



f.'jbiic void doGet (Httpsei vletnequeat req^Kfctt,-' 
Ht t pS e c v letP.es pan se response 1 4 

throws lOExoeption [ 

PrintWriter out = respdtise.getHtiter () / 

iava.util.Da.te today - new java.util.Date () ; 
out.println (*<htlftl3 * + 
M <body>" I 

"<hl style^text-al ign: center >" - 
*HF\'js Chapter2 Servlet^/hl?" + 
"■<br>"' + today + 
**<;/body>" + 
~</html>") t 



rt-fertnits ts to request Jnd ^eifohie 



to re*f«it ptjefit 7^ ier«lrt 
ttdi troi- to Con-U'iFKr LUe 
to Pnh-tW^'to tf> WTML 



\x*i to to rtip** '-j — 
HTML iwfc) 



tier* 



* J remember seeing doGVW and doPostO, 
but on the previous page, you show a jemccfj 1 
method? Where did the mrvkeil method! come 
from? 

A.* Your jervlet inherited It from HttpServlet, 
which inherited it from GenericServlet which 
inherited it from,., ahhh. we'll do class hierarchies 
to death in the Being a Servlet chapter. 40 you just 
need a little more patience. 



You wimped out on explaining how the 
c 0 n ta i ner f"o uwd the correct iervlel . I i See, h ow 
does a URL relate to a servlet? Does the user have 
to type in the exactpath and ciass file name of 
the servlet? 

A: 

X\' No. Good question, though. But it points 
to a Really Big Topic (servlet mapping and UHL pat- 
terns!, so we'll take only a quick look on the next 
few page^ but go into much more detail later In 
ih? book (in the Deployment chapter). 





44 



You're wondering how the Container 
found the Servlet... 



SomtboW, (hr URL \\tnl cumes in as part nf llie rr<|uesl from the 
client is mnjiprd to a aped lie stTvlet on (lie server. This mapping 
(jf URLs to serviets miijlu he- handled in a number of different 



;i web spy developer, The user request mum map to a particulai 
• ( rvlet, and itti up m you m undrrsumd and [usually] configure 



How should the Container map 
servlets to URLs? 

The user does something \n the browser (clrcks a link, hits the 'Submit" 
button, enters a URL, etc > and that something is supposed to send 
the request to a specific servlei (or other web app resource like a 
JSP) you built How mighl ttiat happen? 

For each of the. fotcmrj aapioaches think about the pros and cons 

r^) Hardcode the mapping into your HTML page in other words, tht 
client is using the exact path end fiie (class} name of the Servfet. 

PROS: 

CONS: 

(z) Use your Container vendor s tool to do the mapping: 
PROS: 
CONS: 

{§) Use some sort of properties table to store the mappings: 
PROS: 






CONS: 



mapping URLS to sen/lets 



A servlet can have THREE names 



A iervlf'l ha* a ftl? path aamt, cjbvtOUsly, like- classes/registration/ 
SiKttUpScrvtetclass [a pain to an factual elasa file), The original 
developer of ihe servlm cta*$ chose die <&a name land toe package 
name ihai defines pari erf the directory structure); Had the location on 
ihc server dellncB the lull path name. But anyone who deploys 
the servlet can alia give it a special deployment Htimt. A deployment 
name is simply a mrtt uttmtti! name thai doesn't have to be the tan* 
as iht- class of lite name. It ran be the tame as the servlirt rvinjj name 
njgfimatkittJS^nUpSiervlet} or the relative path to the 
(classeii/rtiBislriHion/SiisiiUpSm'lel.dassL but ii can also be something 
completely different Hike Eunill$ervkt\. 

Finally, the setviel has B /wfr/ir VRLnome — the namr ihe dieM knows 
about. In cither word*, ihe name coded iota tin- M l ML so that when 
the user click* a link that's supposed to go to thai sei vlcl, this public 
URL name is sent to die tiaPtat in tin HTTK request. 




Client-known URL name 



The client sees a URL for the 
servlet (in the HTML), but doesn't 
really know how that servlet name 
maps to real directories and files 
hack on the. server The public URL 
name is o fake name, made up for 
clients. 




Deployer-knawn 
secret interna l name 

The depbyer can create a name 
that's known only to the deployer 
and others rn the real operational 
environment. This name, too, is □ 
fake name, made up just for the 
deployment of the servlet It doesn't 
have to match the public URL used 
by the client, OR the real file and 
path name of the servlet class. 



Actual file name 



The developer's servlet class 
has a fully-qualified name that 
includes both the class name and 
the package name. The servlet 
class ft/e has; a real path and file 
name, depending on where the 
package directory structure 
fives on the server. 
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Well isn't that special how everyone 
gets to express their creativity and 
tome up with their very Own name for 
the same darn thing. But what's the pomtl? 
Redly? Why don't we all just use the 
one, real, nOn-confusing file name? 




Mapping servlet names 
Improves your app's flexibility 
and security. 

Think about % 

So ywi'i < liiini-cided the Krai path and 
nic name into =■ 1 1 tfaeJSft and other 
HTML pagm thai use dial servlet, 
Great. Now what happens when yuu 
ttoed reorganize your application, 
and possibly move things into different 

directory ttrj&ntres? Duwu rtnlfa cwbJ 

iitiitii' (fad firm jnUinv) ttim smut Hmetey 
ttrvctmtf 

By mapping the name instead of coding 
in th<' reaj file and path namr, you 
have the flexibility In move things 
around without having Hit' maintenance 
i a i.Li l» l a n ii r ■ ■ cif Itiiekiiifc clown .Hid 
i li;mi;inn . liciil cortr lli.il rrlrt> in ihc 

■ <|il !■ ii .1 1 U m of iff- mn Id files. 

And wb.it abotlt security? Do you fl'liLIy 

want ilir client to know exactly how 
things art itruotured on yum server? 
Do vim w*ini iln'fn to, tfflf) attcmpi 
tiavig&tc dim'llt in I lit- tervlcl withOUl 
^ning ilirmigh iff- right page* or Ibttttt? 
Because if the cnd-uscr can sec the mii 
path, she can type- it into her browser 

and try u> access ii directly. 
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servfer mapping in the DD 



Using the Peploywent Peseriptor to map UKls to servlets 

When yon deploy your *ervlH HltO your wch Container, yoif|| create ;i fairly simple \MI. 
document called ih<> Deployment Dc*cr iptor ;11D) W Dell tiie Container lutw in run your 
smrvkts aod JSPi Although you'll use the DD for tin in- than juti mapping games; you'll use two 
XML elements to mup URLs i" tervbrtt — mir in map the diem-known fwAlif t.'JtL name in your 
own internal name, ;ind ihc other to m,ip your own internal name to a fully-qualified Wajj rwfflf. 

The two DD elements for URL mapping: 

(J) <servlet> 

maps internal name to fufty-qualified c/ass name 

@ <servlet-mapping> 

maps internal name to public URL name 

i rrr V s 



<veb-app 



<Eeirvlet> 

, , f <servlet-naniG!.> Internal nam l</servleL-nime> . 

The <stvv|et> ek-wt < S ervlGt-ci.qr..-:-foo .ServletK/servlet-claps .:■ j out ^ >T 

, <OQrVjet-riaSie Internal name 2</5ervler.-ri=inie> l>t 

IflpMEKMIfc <servlet-cIa5s>foo.Servl*t2'-; /servlet-cldss> 

-r/servlet> 



- "■- ■ _____________ J J J J *1 **** L + 



<se>r:vlet-ridnifi>mt6i!a41 nans jL</fifervlet-na«ie> 
^ / ■ _ :ijrl-patt(5xn"-/P'iblicl-' /url -pattern "■ 

TWi* °f tt« ' ^/servlet-mappin£r> fv^. tv. a „hat the (fet « s (and ^ *° 

* „hat C«W we* V V x ™ m ^ ^ ^ e 

•fc,^ ****** V 



tomts fa aik, HWW* <servlet-:rmpping> 
itrvlet »kw»ld I ipfoke -Cm- <servlet-name Internal nam 2</servlet-najne> 

■th.s revested URL?"- <urJ.-pattern>/Pobl±c2</url-pfll:t e rn> 

<y servlet -mapping* 

lt J * pebble k ^ w,ldt*ds in 



more 
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Put wait! There's more you 
can do with the PP 

Bt^iclr-, mapping URLs to actual utrrvlris fm can 
life the DD ha rusiumi/c other asprcis of your web 
application including security roles, pi ror pages, 
tag libraries, initial mnliguralioii inlin million, and 

ii" it 1 * a fanj2EK tervet> you ran rwn declare thai 
yipu'll !»■ iu t-t-ssinH ipei ilii s i-nH'iprisr javabcara. 

Don't worry about ihr dn.iiK wi. I li= < iu< kil 
point fbr now i* that tiV 1)1) t;iv<'-, vou a way to 
tlrrlaiiiiivHy modify your application wiilmttl 
( tanging source i ode! 

Think aboui this.., it mean* thai even those who 

ami'ljava programmers can customize ymir Java 
wch application Without having to drag you back 
from your tropical vacation, 




N*/ I'm con fused . Looking at the DD, you sti II don't 
have anything that indicates the actual path name of 
the servMi It just says the class name- This still doesn't 
answer the question of how the Container oses that 
class name to find a sped fit teru te t c I a s s fi le. Is t h er e 
yet A N OT H E R mapp ing so mewhe re tha t says that sue h 
and s nth a class name maps to such and such a file in 
such and such a location? 

Vou noticed. You're right that we put only the clan 
name (fully-qualified to include the package nnmel into 
the <servlet-class> element. That 5 because the Container 
has a specific place it will look for all servlsts for which 
yauVe spec ified a mapping in the DD. 

In fact, the Container Usfcs a sophisticated set of rules for 
finding a match between the U H L th at comes, in from the 
client request and an actual Jaua class, sitting somswliem 
on the server. Bui we'll gel into that in a later chapter (on 
Deployment). Right now, the key point to remember ii 
that you can do this mapping. 



The deployment descriptor (DD), 
provides a "declarative'* mechanism 
for custorqizing your web applications 
without touching source code! 



DD Benefits 




■ Minimizes touching source code that 
has already been tested 

■ Lets you nm-lune your app's 
capabilities, even if you don't have the 
source code. 

■ Lets you adapt your application lo 
different resources (like databases), 
without having to recompile and test 
arty code. 

■ Ma kes it easier for you to maintain 
dynamic security into like access 
control lists and security roles. 

■ Lets non-programmers modify and 
deploy your web applications while 
you can focus on the more interesting 
things Like how appropriate your 
wardrobe isn I lot a trip to Hawaii 



you are here * 



49 



Bob's matchmaking site 



Story; 9oh Guilds a Matchmaking Site 

Dating is tough today, Who lut* thr time when Umr^ always another 

citsk id (Ictr .LM. 1 Bull, -o I ii i w . 1 1 1 r - ,i pirrt' oj ihf dm-cnrli ;ufjon (what's 

IHi <if it, Anyway), b*limt3 nrminir a peck-spec ith: dating shf is 
his ticket (nil r»r the Dilbcittanjob lit Iws now, 

The problem k Bob'* been ;i software manager fur so long rlmi lir's. 
um, a lii clo out of touch with contemporary software enginccraig 
practices. But he knows sonic buzzwords and sonieJavA and he's read 
a little about servJets, s-o he make* a quick design and shirts to cnjde,.. 
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He starts to build a bunch of servkts. 
om for each page 



Hp considered having just a single servlet, \riih ;i lnun:h t»l 1/ 
tcstt, but decided that separate srrvlrts would In- more OO — each 
s-ervlet should have one responsibility like the query page, the sign- 
up page, thtr search results pagej etc. 

Each servlrt will have <tll tin- busing 1<>k"' iwcds i<» modify 01 
read the database, and prints the HTML i" the mptmst stream 
back to I he client, 

// import statements 

public class DatingS«rvl*t extends Uttp£*rvl*t 1, 

public void doGwtlHttpServIetRequest request, 
HttpServletRasponae responsel 
throws I ©Exception j 

// business logic goes here, depending 

//on what this servlet is supposed to do 

// (write to the database, do tire query, etc.) 

Prin Writer Oft - response .getWriter () ; 

ff compose the dynamic HTMT. page 

out.printlfU "something really ugly goes here") } 

I 



web server machine 



kt-jJJL 

EltiM J 
inniii 
iLimiiF 



I n pifl DQ LSfl rvW 



una win 



l^Lii] 

IIILLI3 
IU11 III 4 

HLI1F L 

inn vip 
■wdi n 



n 



OoUOLOjio^Snnlat 




SignivServl«l 



DB 



server/conTainer 



nnii 

LlndL 
•-!}■ 1 iirvi 
Lain 11 □ 

lair l:: 




mm 
111c 14 t 



1 : m . 



1 illiLiViiit 



1 .• ■ ■ : 1 - u - 1 : 



AccnplPinlileCh^iigea^ufVtat 



Ma*nPjfffSwlot InpulPrcifilHCIuiiijEsSaivIrt 




■0- 



The ^lct d«* 
iVrf HTTP rfSf»* 

AND *he eteb «TMU 



you are here * 51 



Bob atft/s JSPs 



Put then it gets ugly, so he adds JSPs 

TboM peskv pritit]n() stattTtteOU for flit* i.tiitpni response pfet realfy 
ii^ly, really quickly. So he read* up pn JSPs ittitl dccjd*« (o have mu Ii 
^ ivlr'i do wfaateyet btiitnes* logic ii nerds in <|u fqitrn ihc H:n;ib^si-. 
insrri nr updale A new record, cu .) thru juntwtt Sht rtqviSt So <i JSf l \ti 
do the H J ML lor ihc response. Thai sua scparatea ibe business logir 
from the presentation... and since he's been reading up on design, lie 
known that stpnmtioa of concerns is a Uivod Thing. 
// import statements 

public class Dating S&r vlet extends Httpservlst t 

public void doGat IHttpServIetRequest request, 

HttpServletEespDnse response) 

throws IOException ( 

// business logic goes here, depending 
// on what this servlet Is supposed to do 
// (write to the database, do the query, etc.) 

fj forward the request to a specific JSF page 
// instead of trying to print the HTML 
i i to the output stream 
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high-level architecture 



Put then his friend says, "You ARE 
using MVC, right?" 

Kun wants In kmw if ihr daring serviie run br accessed from 
ii Swing t.JUl application. Bob says, "'Nd, I hadn't thought of 
that." So Kim says, "Well, it's nol a problem because Via sure 
you used MVC, st> We l:;iu jtisi wliip up a Swing GUJ dirul 
1 1 1. 'j i an aires* die btistttfriK logic rla-vrv" 

And Bub says, -^inlp." 

And Kim Says, "lWl tell rae.„ you did not ii« MVCr 
And Bob says. '"Well, 1 did separate oul the presentation fram 

Kim lays, "Tli;il*s ■ Marl,,, bill lei me guess.,, your business 
logic is all inside Wrofetii?" 

Botj realizes, suddenly, why In* Wtffll bill nuanagemi'iu. 

Bui he's rlel'Tiirined lit do ibis rinbi, sn he ask*i Kim in u,\\<- 
him ,i quick i nish OVCTVICM of MVC. 

With MVC the business logic is not only 
separate from the presentation... it doesn't 
even know that there IS a presentation. 

Tin- essence of MVC i?. that you separate tfir business logic Groin 
tb<- ptescQtatiot-j but put something betwftn them kg thai die 
bu-iness l<>gk can stand i hi lis OWO as a reusable Java das*, and 
docsn'l have to know anything about the dew. 

Boh wan psifdv there, by iK'paratinjf out the blishvcia io^ii iVtun 

the presentation, but hi* business |o>-"u still has an intubate 
wbuMm us iXw. in Hitln;r wowiU, Im Ifo buxtttrts tigit 
ntt» a \n\trt. ami liiai means in' ran'l P'Usr his business lojrjf for 
-■ nh' Other kind of VltfW dike a Swing GUI ur even a wireless 
app). His business lotpc is stuck in el servlet when ii should be in a 
standalone Java das* he tan reuse! 
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fWVC design pattern 



The Model-View-Controller (MVC) 
Pestgn Pattern fixes this 

11" Bnb bad undentroed ilif MVC dt-sijni pann-iL, Jit- would 
have known the husinrss logic shouldn't be Stuffed insidi- 
a servleL He would have realized thai with the business 
lopic embedded in a servlet. Jio'cl be screwed iJ' he one clay 
needed a different way to aetess thi- dating serviei-. Like 
fn-.Ni a i i a ^ am»; We*Jl talk a k>( taore abtful MVC 
and achat pattern*] tatrr in the book, but you turd « <nnck 
andertumdmg now beams? the <moml we build at ihe 
.■ml -il' Lh.ii chiiptn uses MVC. 

If y<m"iv .ili ■ - : 1 1 K' r^mDiar with if, then yqv know that MVC 
is it<n sprrifie 10 snvleis nwl.JSPx iIk ileau ^epar-utau of 
business l<>j;ir and prwiitaiion is jiiM as \alid m am niLcr 
kind of application.! Bui with web apps, it's ratify important, 
because you should never assume that your Imstjicsii logic 
will be accessed ontr from the Vtfsbi We're .sure you're worked 

in ibis Utsim ■■■■ I ■ 1 3 lju i 1 1 1 1 U -.j ] I hi fcinm ill' ■ ■ 1 1 i v ;;il.n, in 

ROfhvMl't' idi i| unci H : fAe *ppr always fhtttigeH. 



ModeinWControIler 
(MVC) takes die business 
logic out of the servlet 
and puts it in a "Model"- 
a reusable plain old 
Java class- The Model 
is a combination of tie 
business data (]ite tfie 
state of a Shopping Cart) 




MVC in the Servlet & JSP world 



Servlet 



VIEW 

Responsible for the 
presentation. It gets the 
state of the model from 
the Controller (although not 
directly: the Controller puts 
the model data in a place where 
the View can find it). It's also 
the part that gets the user 
mput that goes back to the 
Controller, 




CONTROLLER 

Takes user input from the request 
and figures out what it means to 
the model. 

Tells the model to update itself, 
and makes the new model state 
available for the view (the JSP). 



Halds the real bus mess loo/c and the 
state. In other words, it knows the 
rules for gettmg and updating the 
St:ire. 

A Shopping Cart's contents (and the 
rules for what to do with it) would be 
part of the Model in MVC. 

It s the only part of the system that 
talks to the database (although it 
probably uses another abject for the 
actual DG communication, but we'll 
save that pattern for later...) 
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high-level architecture 



Applying the MVC pattern to 
the matchmaking web app 



Sen, |iitl( klH)\VM Vvll.il lit* Iws l<> (lit. SfpilfAtC (KM 

ill-- liihiritrss logiv ('nun 1 1 it- scrvltft*, RQcl create <i 
nt-LjiiSiir Java class for each one... U< represent ihc 
M...I. I ' 

Tln-n the original scrvlel will be ihr C'<>ii<ioll-ri; the 
ttew bu.aines.Si logic class will be itie Modal, unci ihr 
JSf will b« the View. 
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yeah, but is this a good design? 



Put then his friend Kiw takes a look 



Kim corals in and ?nsy? that whih- U IS Lin MVC design, it's a 

tin i nb mi!'- Sun 1 , iln bus h logk h<>* been pulled out into a 

Model, and the sssvltu aci lis rite Cnniwllers working between 
the Models and Vlewi so that the Models can be bo in-dead about 
the Views. Thar* [ill good. Bui look at all those httU scrvlcts. 

What ft" Ihry f.-H.-c-ii r/f/. 1 Now that the buniin'ss logic is palely tucked 
away in the Mndel. the seivlci Cniniolli t i^ii'i doing much except 
some generic application atufl' (or this app, and. oh yeah, it does 
Update the Model and then h kirk* the View into gear. 

But tin* wc*rsi part is tbtit ull thai generic application logic is 
duplicated in every tingle IVirkm' servU-t! If one thing need* to 
change, tl has to change everywheft A i-muninnnnr train wreck 
waiting to hiippen. 

"Yeah-H I I'ell a Link- weird about the duplicate code, 11 says Bob, 
"but what rise, ['an I do? Surely you don't mean for Itie to put 
everything in a single nervlet again? How < mild thai he good?*" 




What a completely lone 

design! Lock at all the 
duplicate code in each servlet. 
Veu have to add the same ovenaU 
application code, like security, in 
almost every serylet 
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higtt-tevet architecture 



Is there an answer? 




FLEX YQUtt MIND 

Leave this far ynu la ponder, we Will 

What do you think? Do you know the 
answer? IS there an answer? Would you 
agree with Bob, and leave the servlets 
as they are. or would you put the code 
into just one ssrvlet Controller? And 
if you do use just one Controller for 
everything, how will the Controller 
know which Model anc View to 
call? 

The answer to this question •■/en ! 
come until the very end of the book, so 
think about this for a few moments, then 
put it in a mental background thread... 
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chapter 2 reflection 



jrpen your pencil 



Using MVC in a serytet & JSP world, each 
of these three components (JSP, Java class, 
Servlet) plays one of the three MVC roles. Circle 
the "M", the "V. or me "C" depending on which 
MVC part that component plays. Circle only one 
letter per component. 



M 

V 

c 





M 

V 

c 



no n- servlet 
Java class 




Servlet 



M 

V 

c 



What do the letters MVC represent in tiie MVC 
design pattern'? 



M stands for 
V stands for 
C stands for 



BULLET POINTS 



■ The Container gives your web app 
commurralions support. I fecycsi? 
management, multithreading support, 
declarative secunty. and support for JSPs. 
so that you can concentrate on your own 
business logic 

■ Trie Container creates a request and 
response object that sennets (and other parts 
of ttie web app) can use to get mformatiDn 
about the request and send information to flie 
ciient 

■ A typical sewle! is a class thai extends 
HttpServlet and overrides one or more service 
methods that correspond to HTTP methods 
invoked by the browser rdoGe({j doPos(<). 
etc.). 

■ The deptoyer can map a servlet class to a 
URL thai the clienl can use la fequesl lhat 

S!.rl T-l I ■■ |i;iyh;3VO'l( h.j Iwlln 

witn the actual class file name. 
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jrpen your pencil 



Who's responsible? 

Fill in the labia below, indicating whether th« web server, tie web container, or 
a servlehs most responsible for the task listed. In a tew cases (none than one 
answer may be true for a given task. For extra credit add a brief comment 
descnbing the process. 



Task Web server Container Servlet 

Creates the request & response objects 



Calls the servicefj method 



Starts a new thread to handle requests 



Converts a response object to an HTTP 
response 



Knows HTTP 



Adds Ml ML to the response object 



Has a reference to the response objects 



Finds URLs in the DD 




Coofdi nates making dynamic content 



Manages lifecycles 



Has a name thai matches (he 
<senrtei^as$> element in the DD 
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servfer and DD exercise 




Code Magnets 



— Servlet 



A working servlat.jnd its. DD jie scrambled up an 
the 'ridge, tan you add the code snippet* on (he 
right to the incomplete listings on the left to make 
a working servlet and DC whose URL ends with 
/Dice? There might be some extra magnets on the 
right that you won't use at alii 





string til = Integer, tostring ( (lnt) t (Hath .tandtmi{) *6i +1 ) ) 
String d2 = Integer.toString ( (int> ( (Math. random O *6) +1) ) 

out. print Jn ("<htna> <body>" + 

"<hl aliqn=center>HFVs Chap 2 Diet Etoller</hl>" + 
*^B5** » dl « " and w t ti2 i 14 were rolled" t 
"< /body:- <■ / h tiril "> " ) ; 



DD 




tag— j iompiete enampie is at ite end o+ this thjpt** 




*/web-app> 
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import javax. servlet . 4 i 
import javax . aervlet . Kttp 
import java.io.^j 



) 




/Dice 
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responsibility exercise solution 

Exercise Sol 



If Hl*US 



Task Web server Container Servlet 







J<nt before starting 
tk thread. 




Calls the sfflvtepfl method 




Then lervlecO method 
tall* doSjetO * doPostO 




Starts a new thread to handle requests 




Starts J servlet tWad 




Converts a response object to an HTTP 
response 




Senerates the HTTP 
•-esfonje stream from the 
data in resyorse object 




Knows HTTP 


fil'ifht browser 






Adds HTML to Uie response object 






The dynamit content 

far the client- 






Container y*ct it the 

*ervfet 


Use* it to print 
a response. 


Finds URLs in the D-D 




To -find the torredt 
servlet -For the -re^gett 




HlfilplKfi Ihfi wquagt ami rftsprmfifi nfijfltf s 




O-fr 4-k» c#t.j'#i- 

is finished 






tCnawi Viow to forward 
in the C-nU.«r 


^nowj who to tall- 




Manages Irtecycles 




Call* service method 
(and others you'll see) 




Has a name thai matches Itie 
^se:vlet-c:ass> element in the DD 






fMit tla« Wftatew 



62 chapter 2 



Servlef 



E^reise Solutions, 
eontirmecL, 



liiiyuil Javm.seiv let. " ; 
import ]avax.£jeivlet . http. *f 
import . ■ ? 




public class 1 Ch2Dice ^extends HttpServlet \ B 


1 public void doGetl 1 


HttpServlet Request request, i 




HttpServletResponse response) 


Throws IQException ( 1 



PrintWriter out = response ,getWrit.er i 



String dl - Integer, toString ( (int) ( (Math. random ( J ) +1} ) ; 
String r!2 = Integer .tostrinq ( (int) ( (Math, random (} *6) i-l) ) i 

out.println (* , <htntl> <rbody>'' + 

*<hl align-center>HF\'s Chap 2 Dice Roller</hl>" + 
w <p>" + dl + " and w + d2 -l- " were rolled" + 
*<Awfr> </html> B ) f 



DD 



two objects, iwo heaps 

A "Working" Peployment Pescrrptor (PW 

Dod'i worry about wtwm <>i thi*. really mean* (ytiifll mm and be 
ic.Hiecl mi iJii!i in ttth&t: chapters}. Hwe, wr i ir^i numcd 10 show von a 
wdxxxnl DD thai aetualh uinAr, Hit other examples in iliis ehaptti 
were mining a lol Of ihe pit-cri thai gr> blto tht Opening <urb-app> 
tag. (Vbu can sec why wc don't usually i in. I tide it in OtXt examples.) 



The way we usually show it in the booh 

<web-app . . . > ^ — Tln-ti eftn'i*$ '™ £ ^"* a ^ > 



<se r v 1 et-n ajne >Cb 3 Bee r< / s e i: v I e t -name > 

< servlet -class >com. example. web. BeerSelect-f/serv let- class:- 
< /servlet -- 



<fi e r v 1 et - u w ■ >--f -r 

<servIet-name>Cb3 Beer«;/s 
*.url -pattern > /Select Beer * 
< /servlet-mapping> 



-mapplni 



serv let -name? 
.do-<;/ijrl-patterrt> 



</web-app> 



The way it REALLY works 



<wefo-app Xm 1 n a - ri h t tp ; / / j a va * s un * enm / xml / us / j 2ee " 

xmlns !xsi= M http://w'rfw.w3 .org/KGCa/XMLSchetna-insLarice" 
xsi :5chemaLocat ion="http: // java .3urj.eom/xrnl./ns/ j2ee/web-app_2_4.xsd" 
ver5ion="2,4"> 



<sarvlet> 

<serviet-nanie>Ch3 Beer</serviet-na.rne> 

< r v 1 e t 1 as .s >^oiti . exampl e . web . Beer Select / aer v le t - cl as s > 
<7servlet> 



< s e rvlet -mappi ng> 

< servlet-najne >Ch 3 Bqg r< / a er v 1g t j namo 
•'url-pattern>/SelectBeer.diD</iJEl-patteni> 

</dervlet-mapping> 

</w«?b-app> 
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HowJ2EE fits into all this 



ThffJ$Ka 2 Enterprise Edition is kind of a super- 
ipei 11 l 1 1 . .?a pi n stes otfeei sfjeidficaliansf, mchidini; 
thf Servlm 2-4 sper and ilirJSP SMJ qspc; Tlt;<t\ for 
i in- web Clou I ii inrr. Bui LrieJ!£riE 1.4 sprc alsa Includes 
the Enterprise JavaBean 2,1 specification, lor llic EJJ1 
Container. In Other words, ihc web Container is tor web 
■ ejpponerjtg ■Sefvk'1:, andjhho, and the KJU Container is 
lor bosom cdmiMHLi'iiK 

A fiilly-nHnpliamJilEK application nerve msH have 'j'ff/; 
;i web Gontaitier and an I^JB Gontamer (plua other things 
mcliKlittfi .i . JN1 *l imdjMS bnplementftiion). TSarneat is 
jlisl <i wcli C'ffitliiin+*i! tl is Htil] conipJiaul with (lit: 
portions of the J !£ Eli spec that address lh<: web Container. 

I'ltim-at is a web Container, run a lull J2EE application 
server, because Tomcat dom nol baye an 



r J2i 



EE Application Server 




A J2EE application server 
includes both a web 
Container AND an EjB 
Container, 

Tomcat is a web Container, 
but NOT a full J2EE 
application server. 

A J2EE 1.4 server includes 
the Servlet spec 24. JSP spec 
2.0. and EjB spec 2.1 





0} 

W" So Tomcat is a standalone web Container, 
that mean there are standalone EJB Containers? 



A: 

XT. In the old days, say, the year 2000, you could 
find complete J 2EE application servers, standalone web 
CunLiirkM!,. LinU <, I <i i>dj lu nu LJB Contdineri. But today, 
virtually all £jfl Containers are part of full J2EE setters. 



including Tomcat and Resin, Standalone web Containers, 
are usually Minfigurijd la work with an HTTP web server 
(like Apache},- although the Tomcat Container does have 
I h e ability t o act a s a bas i c HTTP server. 0 u ! for HTTP 
server capabifity, Tomcat is not nearly as robust as Apache, 
so the most common non-EJB web apps usually use 
Apache and Tomcat configured together — with Apache as 
the HTTP web Sitvtr. and Tomcat as the web Can wirier. 

Some of the most common J2EE servers are GEA's 
WebLogic, the open source J Boss AS, and IBM's WebSphere, 
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3 hands-on MVC 



Mini MVC Tutorial 




Create and deploy an MVC web a pp. it § ttme to get your hands 

dirty wnLng an HTML form, a t&rvlet controller, a model {piam old Ja^a claet), an 
XML deployment descriptor, and a JSP view. Time to buiid it, deploy it, and test it. 
But first, you need to set up your development environment— □ project directory 
structure that's separate from your actual deployed app. Next, you need to set up 
your deployment environment following Ihe servlet and JSP specs and Tomcal 

True, this Is a very small app we're building, But there's aimos! NO app that's too 
small to use MVC. Because today"s small app is tomorrow's dot-com success... 



Ui\% is a rtsw chapter 



official Sun ejram objectives 



Web Application Deployment 



Coverage Notes; 



2.1 Construct the file and directory structure of a web 
application that may contain (a) static content, (b) 
JSP pages, (c) servtet classes, (d) the deployment 
descriptor, (e) tag libraries, (f) JAR files, and (g) 
Java class files. Describe how to protect resource 
files from HTTP access. 

2.2 Describe the purpose and semantics for each of 
the following deployment descriptor elements: 
error- page, init-param, mime-mapping, servlet, 
servlet-elass, servlet-mapping, servlet-name, and 



Ait uj the nbjeetirts in tkii .(fetinrt arc nmerrd 
Campitttty in the Dtphymtnt chapter; tliis 

.'■ ,:<•! i; ,1 f i-ii' /•«../. Ifil\ i hiif'li f ,'■ ihi mil 

tomplfttsUni-tthfinitii tutorial in ihr hunk. 
t$ [f von dip it, y/m might hart iroubb lain 
irstiftg .shmc ffi if" 1 iitttrr tXtURplti hi l/iti i 
(hofteti ncliere wr </<m7 go tfimugh entry 
dfUui again). 

.Iv ivith tii( previous two chapters, you don't 
used tn form on mmorizing lit* rontmt in ttin 
rim filer, just gtt in tluie and d« it. 



2.3 Construct the correct structure for each of the 
following deployment descriptor elements: 
error-page, init-param, mime-mapping, servlet, 
servlet-dass. servlet-name. and welcome-Hie 
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hands-on MvC 

let's build a real (small) web application 

We looked ni the tiolt of ;i » until iiht. we talked a Imi ab 

deployment drstTiplors, u'p luuk a llrsl look a! llit- Model 2 
MVC mvliileflLLiT. Bui j»y lam'l just if£t here and mid all dsy- 

now tt'« time to actually & sonifihing. 
The four steps we'll follow: 

(l) Review the user's views (what the browser 
will display), and the high level architecture 




Create frie development environment that we 
will use for this project (which you can use for 
any other example in the book). 




Create the deployment 
environment that we will use for 

this project (which you can. use for 
„ any other example in the book). 




Perform iterative development and testing on the 

various components of ourweP application, (OK. 
strategy than a step.) 



Note; Wc recommend iterative development and tesiing, 
although we won't always show all the steps in this book. 
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user 



The User's View of the web application- 
a 



Our web iijipliraiiim is a B^r AtKjsin. Users will he; able hi 
surf lu otir app, iiimwcr a tjurHiion. arid yri buck si uiLtiin^ly 
useful brer advice. 



Beer Selection Page 



Si- led beer t hiiriiL-lcrMit^ 
Color: I 



f SubmH> 



TVis pa^e -will ^rrfcten In 
HTML, *T-<i «iH 
an nTTP Bat «**?fc 
H «Ji^ IV* wcr'f H"l«- 




at** ta«d « 1 ***** 



Why are we writing a Web 

application that gives beer advice? 

A: 

After an axiidjstiw marketing 
research effort, we concluded that 
9£W6 of our readers appreciate bee?, 
The other 1 0% can simply substitute 
th e word "coffee" for "beer*. 
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Here s the architecture... 

Wi n though iliij. Uii tiny application, wi-TI build ii min^i s,impU' 
MYG strcfeitectitrt, Thai w;iy, when n becomes THE hotteM site m 

ihr \vrl>. We'll l» J [t';t(lv (hi r-Jilr-ml ll)i* >lf>|ilk<HiOT]. 




Container 



Client 




form 



1 - The client mates a request 
far the form.html page. 

2 - The Container retrieves the 
form, r> tmt page. 

3 - Thfi Container returns the 
page to the browser where the 
user answers the questions on 
the form ami . 



V-1 



Beer b xpert ^-^O'id J** 3 
component > 



4 - The browser sends the 



Container 



pro" Viert on out when 
sC^er, assume rt'i tW rc 




Beer Expert 
component 



5 - The Container finds the 
correct servlet based on the 
URL and passes the request to 
theservleL 

6 - The servlet calls the 
EeerEJiperl for help. 

7 - The expert class returns an 
answer which the servlet adds 
to the request object 

6 - The soviet forwards the 
request to the JSP. 

9 - The J BP gets the answer 
hrii mo request 0b|C-d 

10 - The JSP generates a page 
for the Container 

11 - Trite container returns the 
■user. 
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development environment 



Creating your development environment 

There **e li »t*. of ways m m c-«iuld organic your dewjlopraent cttrectwy Muuiutr, \>ut 
here's what we recommend (bi imall- iutd rwdmni-siwtl projects. When it's time 
1^1 deploy i lu 1 ucli agyp, we'll ropy ;i pardon uf iliis invi wbet'evet <iur particular 
GptttAinor ^;uiis ihr pieces to go. [to this tutorial, we're i 

** Y 0ur **** 



<Y°» dont «ed this 
d^W? f* ^» l> 




Vrn-r static a»,d 

dynamic vitw 
Components <^> litre. 



web.xjnl 

r 

Tim is where 

yes 



We're of ton™ winj «• ita*da«i 

yt jtl tW normal benefits of 

packajev 

- project wi. jp nir J te Bw 

- namespate »i»J5e™eh-t 

- portability a»d reusability 




1* tUiSt « 


















.,-|.>l H . 









result jip form. him! 

S r 

£*JmpltS of 
iomt vie* 
Component* 



Notice -that *eW separate 

hit Controller Components 
fro™ the »odel Components 
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hands-on MVC 



Creating the deployment environment 

Deploying a web app involve* l»t»th Qoflfei»eiS?peetfic rule* utisl 
reeuiremiMita of the Servtets antllSP *p<*ificationit. If you're hch 
H i ■ [ > I ■ : v 1 1 1 L r m Tom fat, ymi'll have n> figurf run exactly where your web 
npp sliniLlrl In- tdatiwe ID jMtr Container.) In mir example, everything 
below ihc "Bcer-vl" directory k the same rrgtiniless of your Conlflineif 



Tomcat-specific 



TKi* part of ihc 

diret-tory itrviture il 



hii^diwete^y ndme iUo rePrctlnti 
il»e "tenW root'' whith Tonrfit 

who, reiolvi^ KflLi. We'll 
wf l-rc this torf^t j„ ^ j^j 
ih th< d*pJoy»,e*t thJfGtr. 




luirtd by To».djt 

4bf 



require.! 

a*d it n*it be dir e ttly 
the Wat W 



Everytkmj WL&ti IKis 

dot-bed lh* IS &w *etaP?r Jpl 
ttf be *»« "J*"* 1 '* 1 °* 

y<Jw r C*ntii«f **** 



Hit ndne of 

■Ue web tv. r 



Part of the Servlots 
specification 



IH+4+ + + + + + + + + tl-H-rl-ii™>-iia'iHHHH+ + + + + + + + + +hh-!-<4+ + + + H- 



ApjjiiCjliOri 'SpeCifiC 










•##4M* 
'/Ill .Ml ' 







form.htnil rasultjap 



Thu «icb.*»l 
file AIWST b< b 
WEB-INF 




This pKkije Tt-ue.fi.rw n nae-Oy b k>i v* 
\m the <W«ow,e*t emrironmfnt Kuleis you're 

i I J i - ■ -— — ■ - 9 man 

th-t Liter * tt* book), the* yaw A1U£T n4 the 
NF/3a° r¥ ^ twre i "^ tl '* tet y w^dtr 



EesrSBlKt.tliH 



E- J £l ^~ * j I 1 ""I LS " 
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building t/w app 

Our roadwap for building the app 

When wt --in i . . I thh chapter we owhivd a fbur-*wp process 6w cU^opfog cmi web app. 

Sin filT WcVt-: 

1 • IcvirUcd tlw Msfi I'/cd'h f(i| OU|' WCh ilpp 

2 ' toojfced at I he tmhitrrtitft 

!i - srlup t hi- liirrfopmrtil jukI thfilvvment cuvii -rmuiml.f fi.ir rrraliiiK ntul drptavinn llif .ipp 
N<>\* it's time for 4, rtrfiiing ihc app, 

Wehm nrt\ ft^rn *.[-vcr-;i| populai dcvrfjaj nupnt metfiodoiogie* (a linlc from extreme 
0Kgj$giming, iimuivr dt-Mopmcrii , and flaaiagte tfwjft ri>r<mmwn eVfl puiposes,,, 



The five steps we'll follow (in step 4}: 

(S3) Build and test the HTML farrr t ot the user will first request 

@ Build and test version 1 of the controller servlet with the 
HTML form. This version is invoked via the HTML form and 
prints the parameter it receives. 

@ Build a test class for the expert / mode! class, then build and 
test the expert / model class itself. 

Upgrade the servlet to version 2. This versbn adds the 
capability of calling the model class to get beer advice 



Ripp~pW f J-io J^O f msf Jrarfa thu con/taf in. uorcjnn 7 fiiwhi^h iHHc 

the capability of dispatching to the JSP), and test the whole app. 
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hands-on JWl/C 

The HTML for the initial form page 

Tin? HTML k %iffip$ttr-k puts' tip the heading text, the cfcop*dawn H*t 
from which the user select* .1 bed color, unci the submit button, 

<3itml><body> 

<:hl a lign--" center" >Beer Selection Page</hl^ 

<form method-"posr" Why did *e choose POST 

action="S.l«tB«r.do" ^ iwtrtd of #T? 

Select beer characteristics^ TK,i U HTA]L thiiJa ±he 

ler^rt i* tilled, TW ,s NOTHI/^ 
Colc " r ' '» yo«f directory structure „a« e d 

<S*tect namfc= w color w si2e= w :''> "SelctiBcer.do"' fts a Io^iCjI njire... 

<option value="light"^ light </*ption> 

<option value=' r amber "> amber </option> jr 

<option value= "brown "> brown -^optiony^ TliVs u ho* * e ireated the f-uJI- 

<option valuG="dark"> dark < /option? J 

d<™ «em,, your of fcow *-Jy v^y 
</select> — *Did y» -figKTe cut size-T ?) 

<br><br> 
<eentcr> 

<input type^SUB-MIT"* 
</center> 
</f ormx/bodyx/html > 



Whv is the form submtttirvti to "SelectBeer.do'' when there is NO servlet with 
that name? In the directory structures we looked at earlier I didn't see anything That 
had the name 'SelectBeer-do" And what's with the J 'do" extension anyway? 

A: 

£\ lielectfteer.do is a logical name, not an actual file name. Ifs simply the name we 
want the client to use! In fact the client will NEVER have direct access to the servlet class 
file, so you won't, for example, create an HTML page with a link or action that includes a 
path to a servlet class file. 

The trick is, we'll use the XML Deployment Descriptor (web.xml) to map from what the 
client requests r'ielectBcer.do*) to an actual servlet class file the Container will use when 
a request comes in for'SeleetBee^do'. For now, think of the ".do' extension a* simply part 
of the logical name (and not a real Hie type). Later in the book, you'fl learn about other 
ways in which you can Use extensions (real or made -Up/logical) in your servlet mappings. 
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deploying m : testing 



Peptoying and testing the opening page 

To test it, yuii need to deploy [\ mu» the Ddntwoer flttMG&fy directory 
stracturei stars Tomcat; and bring up the page in ;i browser 



Create theHTMLinyour development environ merit 

Create this HTML file, call it form, html and save it in your development 
environment under the /beerVlAveb/ directory- 



Copy the file into the deployment environment 

Place a copy of the form, rifrrtf file into tomcattoebapp&/Beer-v1/. 



(Remember, your tomcat home directory might have a different name). 



Create the DD in your development environment 

Create this XML document, name it web.xmi, and save it in your 




farm html 




;web-app >:nilns="ht.tp : //java . sun.ccrn/jtml / n:;/ )2<=:e" 

xrolns :xsi="http: / /www. w3.org/2D0l/XMLSchenia-instai5ce" 

tcai i s chema Locat i ci n ht tp ; / / j a va . a un . com/ xrn 1 / n S / j 2ee / web-app_i!_4 * x a <i " 



<aeivlet> 

■'servlet-name>Ch3 3eer*. / servlet-name-j 

r c 1=1 1" r T at anl a c o '■* 

«J--^j J_ "rf -I. "i-r J- 1.1. «J 

</servlet> 




servlet to* 

<servlet-.raappiiig> 

•- c vl et-n ine >Ch3 T Beer- /.se r vl et - n iine -■■ 
<url-pattern>i|Sel«ctBMr.tio</url-pattem> 

</servlet-mapping A. *\ ... f \ t I rtfe* to 
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hands-on MVC 



The main job of this DD Li lo clclinc the mapping betwoftn the Icgic&i 
name the client uses Tor the fccjacal ["KclectBccrdo") and the actual 
sjjrvltfi class Gte (cran.esiiniple.wcb.lieeiSelfct). 



r — 2 



Copy the file into the deployment environment 

Place a copy of the web.xml file into 
tomca Vwebapps/Beer-v1/WEBJNF/. 



You MUST place <l there or the Container won't find it and 
nothing will work, and you'll become depressed. 




Start Tomcat 

Throughout this book we're using Tomcat as both the 
web Server and the web Container. In the real world, you 
probably use a more robust Web Server (like Apache) 
configured with a Web Con^rer ilike Tcmcai: But Tomcat 
makes a perfectly decent Web Server for everything we 
need to do in this book. 

To start Tomcat, cd into the tomcat home directory and run 
bin/$tartup.$fr. 



web Jirnl 



% cd tamcat 

% b in /star tup. sh 



(§) Test the page 

Open the HTML page in your browser 
and type: 

I lixsal I iusL. 8080/Bum -v 1 /fun 1 1 . h Li i il 

You should see something like the 
screen shot here. 




form html 

hlip '.'local hasl BOStoBeer ^1 'form html 

t9±v Vah 



Beer Selection Page 



Select beer characteristics; 



Color light ; ' 
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sen/let mapping 



Mapping the logical name to a servlet class file 



Diane fills out the form and hit* submit The browser- 
gene rates the request UftL: 

/ B eer - vl / 5 ele ct Beer, do 



The Iwst TKt **t. iff Uitil r^" hamC 
Content VOOft 




The Container searches the DD 
and finds a <servlet.mappino/.> 
with a <up!-pflttern> That 
mote has r'SeleetBeer.do, where 
the sJash [/) represents the 
context rooT of the web app , and 
Select Beer .do is the logical name 
of a resource. 



Container 



The Container sees that the <serviet- 
name> f or this <nrl- pattern* is "Ch3 
Beer" But that isn't the name of ars 
actual servfet class file. "Ch3 Beef 1 " is 
the name of a servfei, not a serviet 
dassl 

To The Container, a serviet is somethirtg 
named m the DD under a <servleT> tag. 
the name of the serviet is simply the 
name used in the DD so that other 
ports of The DD cdrt map to it. 




Container 
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hands-on MVC 



The Container looks inside the 
<servlet> tags for samaThrng with 
The ^servfeT-name; "Ch.3 Beer" 




Container 



The Container uses the 
«servleT-cl<is5> in the * sen* let > 
tag to know which servlet cfass 
is responsible for handling this 
request. If the servlet has 
not beer initialized, the class 
is loaded and the servleT is 
initialized. 



Container 




i/VBtr 



The Container starts a new thread To 
handle The requesT, and passes The 
requesT to the Thread (to The servleT's 
service() method). 




The Container sends The response (through The 
Web Server, of course*! back to The client. 





Client 



Container 
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servfer comroMer version one 



The first version of the controller servjet 

Our plan hi to build the sorvlcl in Rag&t, resting the various CWftfllUnkafiafl 
link* .is we ii<>. In rhf end, rememheTj the nervlri will acwpi .1 purami'ier from 
the request, invoke s method on the model, save inftirmaticni in a place the JSP 
can God, and forward ihr 1 rqiic-si to ihcJSP. Bm lot iliis linn version, our goal 
is just to make sure thai the HTML png? can properly invoke L lie sr relet, find 
thai the gervlut is receiving tlit* HTML parameter correctly. 



Servlel code 

package com. example. web j 



^ ******* 

public class BeerSelect extends HttpSezvlet [ 



import ] avax . servLec ♦ * ; 
import jgvax. servlet ,http. *; 
import j ava . io . * ; 



We II use dcPcat to 
handle the HTTP 
«<V*st beeit.se 
Ue HTA1L &» 
say* 



public void doPost iHttpScruletReqnost request, 
HtfcpServletBesponse response) 
throws lOEXception, ServletExcept jon i 



c&Bp&rme . B^tcontentType-( 9 t«3tt/ht]i)l*) ; 
PrintWiiter out = response. getWriter () j 
out. print In ("Beer Selection ftdvice<br>") ; 
String t> = request. geLParamaLer ("ceilor") ; 
.nut. print In ("^br^Gm beer Color " + c) ; 



Key APIs 



«iff6!rfaef&* 
javsji.sftrWflt Sexv/if 



] 



Wie'ire ^ 5<«ir»3 bttk advice 
here, jut d<sflsyih^ iai 



javaxseirWet.SefYtefiReqHesf 



This fe-fchod Cfl«ej £ro« the 
SeevletResfwe mtcrAte. 

This *etW £o«(i the 
SeevletRe^st interface 
Notice that the taUMCwfc 
^atihes the take *f the 
"ni»e" attribute m the 
HTML'* <«lett> ta 5 



Jsww .servtetServielfiesporwe 



;a i/fljf.serv/ef. Ge/iericServfef 
E 



javar.serY&.Jiffp.HtypSefWetffequnl 



i 



^Interface** 



) 
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hands-on MVC 



Compiling, deploying, and testing the controller servlet 

OK, we've built, deployed, and tested our HTML, and wi-'v»> imili and deployed our OD 
;\\iM, we cmi the web.xml htto the deployment environment, bul technical]) the 1111 won't 
lie deployed until we restart Tomcat). Noiv tl's time t<> compile the Rrst version of tiie 
servlet, deploy ii, and test it via tin- HTML [brm. Now we'fl resuirt Tonacsri to make sun: 
dial it "sees" the web-xml and servlet cluss. 



Compiling the servlet 

Compile the servlet with toe -d flag to put the class in the development environment 

f frerytUj after "Wat/" «H be tta «»* 



r 



% cd MyPro je-cts /b^ervl 

% javac -classpath /Useis/bert/ Applications 2/ tomcat/ common/lib/ 
servlet-apj jar: classes: . -d classes s re /com/ example/ wel>/BeerSe lect . java 



Use 3 sembdclon 
o„ the Wndews 0S 



U« ihe -d oftio* h> M (fcc t^filer fc> put the dan -file 
<*io the drat <WtWy within ike tervett pailta* st**d» 
VW .dan -File will „ r m /beetVf/filaweViWe^ple/™ 



Deploying the servlet 

To deploy the servlet, make a copy of the .class file and move it to the 

j'Beer-v1 WEB-IN F/dasses/com/example/web/ directory in the deployment structure. 



Testing the servlet 

1 - Restart tomcat! 

2 - Launch your browser and go to: 
http://local host:6 080/Beer-v 1 /form . html 

4 - Select a beer color and hit "Submit" 

5 - If your servlet is working, you should 
see the serv let's response in your browser 
as something like: 

Beer Selection Advice 
Got beer color brown 



E*r ■.VJldcw bfi.1 



% cd tomcat 



% bin/startup, sh 



http://locaflwst. SOSD/Beer -v liTorni .html 




Beer Selection Page 

| (S*M- Om» <H 
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me model class 



Gilding and testing the model class 

In MVCj th»' model tends to be the "back-find 1 ' u l~ th<* application. It's often thr legacy synem 
that's mnv bring expiwd m ihc nvh. in raosl cases iit-i |i],mh oldj&ve code* with no 
knowledge iA the (:u-i thai h inigiu be called by servleis. 1 be model shtmldii'i be ihtl down u» 
being used by only a singlr wscb app, so it skotild be in il s i>wn Utility packages. 

The specs for the model 

- Its package should be com. exam pie. mode I 

- Its directory structure should be ,'WEBdNF,classes/com/exampJe.''mode! 

- It exposes one method, get Bra rids () that takes a preferred beer color (as a 
String), and returns an ArrayUst of recommended beer brands [also as Strings). 

Build the test class for the model 

Create the test class for the model (yes, before you build the model itself). You're on 
your own here: we don't have one in this tutorial. Remember, the model will still be in the 
development environment when you first test it — it's just like any other Java class, and 
you can 'est it •.-.•iihou'. Tom c it. 



Build and test the model 

Models can be extremely comploaied They often involve connections to legacy 
databases, and calls to complex business logic. Here's our sophisticated, rule- 
based expert system for the beer advice: 



package com. example. mode 1; 
import java.util 

public class BeerExp^rt [ 

public Lisr getBrands (String coloi 
List brands = new ArrayList () t 

if (col sc. equals Catnbet'' ) ] I 

brands. add ("Jack Amber"} f 
brands ♦ a cid { "Red Hag se" j ; 



else { 

brands. add ("-Jail Pale Ale") / 
brands . add ( "Gout Stout"}? 

I 

return (brands) ; 



r l« Eat Wndtw Heu SkaMMI>4 



% cd beer VI 

% Javae -d classes src/com/Gxample/model/BeGtELxpert . java 
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hands-on MVC 



Chancing the serviette call the model, 
so that we can get REAL advice... 

In r 1 11 k version tawWffvJci we'll eohatfcc il»<- ilrij^^i'i nacthod to 
rail the model for advice i version Iktiti wjfl rnukr tiu- advice came 
from *i JSHi. The code change* axe trivial, bin the important purl is 
iindcrsiLinding the redeployment 6f (lie enhanced web upp. You cm 

try tu write llle L-urle, l c< (iinpilr, .mil di'plny ou \ own, of ynu 

i aii turn the page mid Mirny 1 idrmg... 



parpen 



your pencil 



Enhance the servlet, version two 

Forget aboul servietsfora minute, let's just thmk Java What 
are the steps we have to lake to accomplish the following? 

1 - Enhance the doPostf) method to call the model. 

2 - - ::■:>•! | .1=.. tri- • >ctvM:l 

3 - Deploy and test the updated web app 



fM& tiasa. BetvSclctt trends rttt^ServId: f 
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calling the model from the servtet controller 



Servlet version two code 

ftgntttnlteit the niodi'i ts jusi plain okljavo, so we call it lUte we'd call any 
oiln i J 1 1 "i 1 1 mt-ihntl insinuate the tnodel cbtfi* atid call rts int*[|ind! 



package nrjm.ex^mple-.webf 

Pc»t a^fc^t * b 

import com, example , model . * ; yatka^ 5 * 

import javax.cetvlet.*; 

import javdx.servlet.http. 1 ," , 

import java.io.*; i-"****^ 

import java.util.*; — " 3 * 

public class BserSeiect extends HttpServlsL [ 

nubile void rioPust (KttpServletHequest request, 

HttpScrvletKespc-fLse respoiiie) 

throws lOException, ServletException I 



String c = request, get Parameter ("color") i , , 

BeerExpert be - new BeerExpert*) ijjM ^ ^ ^g^^ 

List result - be .getBrrands (e> ; 



response . se t Con tent T ype < " t ext /h tinl " | } 
PrdntWritet out m response, getWriter O f 
out .println ("Beer Selection AdvictKbr>" ) ; 

Itwatsr it - taeult.itaritsr() ; 
while (it. hasNext( ) ) { 

out. print ("<br>txy; " + it.next()>, 



34 chaprer 3 



hands-on MVC 



Key steps for servlet version two 

VV<; have iwo main ihintp> l" recompile the vervhft mid 
deploy the mode/ elnss 

Compiling the servlet 

We'll use the same compiler command that we used 
when we built the first version of the servlet. 



% cd beerVl 

% j a Vac -elasspath /User s/bert/j^plica.tions2/ to meat/ coninion/lii)/ 
servlet-api. jar: classes: . -d classes sro/c*^r , eXanple/web/BeerSeIect . java 



Deploying and testing the web app 



Now, in addition to the serv(et_ we also have to deploy the model. 
The key steps are; 

1 - Move a copy of the servlet .class file to: 

. ./Bee r- v 1 /W EB-I N Pel asses/convex ample/web/ 
This replaces the version one servlet class file! 

2 - Move a copy of the model's .class file to: 

. . /Bee r- vl WE6-I N F/cl asses/comfeKampSe/rnod el/ 



3 - Shutdown and restart tomcat 

4 - Test the app via form.html, 
the final browser output should be 
something like: 

Beer Selection Advice 
try: Jatk Amber 
try: Red Moose 



% bin/ shutdown , sh 
ft bin/startup . sh 



nnp .'/localtiosl BOaO/Beer-vl/lam limi 



SdnJ tin L^ltffc-tefMicl 
C'nkir »cp' 





example! 



Wife 



modal 
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Review the partially completed, MVC 
beer advice web application 

What's working so far... 

Container 




Client 



Container] 




BeerExpert 
component 



1 - The browser sends the 



2 - The Container finds the 
r>::i eel servlet based on the 
URL. and passes the request to 
Ihe senriet. 

3 ■ The serviet calls ihe 



4 - The servlet outputs the 
response {wtiicti prints the 
advice}. 

5-TTie Container returns ihe 
page to ihe happy usee. 



What we WANT. 



... 



Container 




1 - The browser sends the 
request data to the Container. 

2 - The Container finds the 
correct servlet based on the 
URL, and passes the request to 
the servlet. 

3 - The servlet calls Ihe 
BeerExpert tor help 

A - The expert class returns an 
answer, which the servtet adds 
to ihe request object. 

5 - The servlet forwards the 

6 -Trie JSP gels the answer 
from (he reque 



7 -Trie JSP generates a page 
for the Container 

8 - The Container returns the 
page to the happy user 
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hands-on MVC 



Create the JSP "view" that gives the advice 

] get your hope* up. Vou'iv j^tiing to b»Ve ti> Wjul (bf a fcyfi 
chapters before we really start ulkiriK afeputjSPfe. Thi-i.JSI 1 isn"i 
actually particularly goad on*i riilirr [bcj&tiwe of iu sc-ripih'i code, 
which wr'll talk about Ihht in the book). For now ii should be pretty 
easy to read, and if you want CO experiment a little, go lor it. Although 
wo roufit test this JSP now from the browser, we'll wail tinlil alter we 

modify tin- service (version three] to tea if it works. 



Here's the JSP... TL 

i w ii j pajt directive 

<|f page import ="java . util. *" »> % (we're thiitkinq i£% pretty 

oWious what this out doeJ 

':html> 

<body> ttdndard HTML fwhith ii known a* 

<hl ^gn-^tSQRter^^aQex Recommendations JSP</hl> ^ "tefW* tent" in the J£P world). 



List styles - (List} request *get Attribute ("styles") 
Iterator it = styles. iterator () ; 
while (iL.h^Next () 1 j 

out. print ("<br>try: " * it . next (| ) ( 

1 

Son* standard Java letting 
.w.di <% V iay (thu b 



Krr, we're jcttwj a* attr.fc.tc 
frrn, the revest „t , f it A 
little later in t*e we'll 

attributes and How we "^nj<jed 
to jet the revest object 



Deploying the JSP 

We don't compile the JSP (the Container does that at first request}. 
But we do have io: 



1 - Name it "result.jsp H 



2 - Save it in the development environment, in: /web/. 

o - Move a copy of it to the deployment environment in /Beer-vU 



resultjap fcrmhtml 
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dispatching 3 request fo s JSP 



Enhancing the serviet to "call" the JSP (version three) 

Jn this siep weV going K» modify the aeivtet *% satf* thf JSP to phHhm. the OOtpOl 
urn . "rin 1 < 'uiiKiiiii'i' piwides a mechanism called M ret)U«9l d^st^ching^ ih.n 
allowt one Gootatacr-itiaiia^ctl compnTiifni i<> <all another, snd that's i^v 1 1 Lir 
use — Jic scnJn will gt:i ilif iiiii* from ihr model, save is in the rrqucrir object, then 
dispatch the ivqtiest to the JSP 

The important changes we must 
make to the servlet: 



1 - Add the model component's answer to the request object, so that 
the JSP can access it. {Step 4) 



2 - Ask t hi? Container to forward the request to "result.jsp". (Step 5} 



Container 




Client 




Bcerbxpert 

CCTT.pClEnt 



1 ■ The browser sends the 
request data To the container 

2 - The Container finds the 
correct servlet based on the 

lha serviet 

3 ■ The servlet calls the 
SeerExpert for help 

4 ^ The expert class returns an 
answer, which theservlel adds 



6 - The s. 

Eh9 JSP 

6 * T]w JSP gels the answer 
iron me request oDject 

7 - The JSP generates a page 
Ibr the Container. 

6 - The Container returns (he 
page to the happy user. 
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hands-on MVC 



Code for servlet version three 

I h hw we modified the (Warvtvi W4 add the tii"'l' I 
tomponent i answer to rl^ reque*l object [so titejSF 
can retrieve it)j :-*t itt how ws tmiced th* Container to 
dispiiirli cr> ihcJSR 



package cpm.fexaitiple.Webf 

import coTsi .example, model . *t 
import javax.servlet . */ 
import jivax.aervlet ,hLLp.*f 
import javd.io.'j 
import java.util . 

public class BserSeiect extends HttpServlet ( 

public void doPost (KttpServ let Request request, 

HttpSarvletResponse response) 
throws IOExceptiori, ServJefcExceptitm I 



String c - request. get Pa rameter{ "color" } ; 
BeerExpert be = new BeerExpert ( | t 
List result = be.getBrajsdsi (c) ; 

Ufa* tfc*t the JSP ,. ^ ^ 

// «*pcm*fi .aetCutit^r.'.T , [.'.> ("tuxt 'haul") j ^ p*-odu£f. the output, *e ihould 

PrintWriter pot - response. getWr iter ( U " «"o« "the tet-t pu-bvt -f»-o» ihe 

it out.println [-Beer Selection Wfei«»<hr 1 1 > Sfrvld , ^ £wilBni ^ d ^ ^ „ 

that y* c*u]d M\ «c <t here 



l 



Add J* *ttnbut< to the H«\ut*t 
request. setAttribute ("styles" , result) ; <f— th* JSP is "^^5" 

RequestDispatcher view = 

request . gctRequestDi spat char ( "result , jsp"} ; ^ 

diipv^.1 ej^y**^ 

view, forward (request, response) ; ^ tl* J£p 

Wie the «^ue*t dupitther to iik 
tlx Containev t» oaJt u p the JSP, 
seTwiihj it the revest *neJ ireiponse 
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compile, deploy, and test 



Compile, deploy, am! test the final app! 

lit this pfaapti r uv\v 1 ■ 1 1 ■ 1 1 an entire (albc-il liny) MVC application 
using HTML, servlet* und jttIV You can add chl-e to your resume. 



Compiling the servlet 

We'll use the same compiler command that we used earlier: 



% cd beerVl 

% javac -classpath / Use rs /ber t / Appl i cat i ons 2 / tomcat / common / 1 ib / 
servlet- api . jar : classes : . -d classes src/ccm/example/web /Beer Select . java 



Deploying and testing the web app 

Now It's time to redeploy trie servlet. 

1 - Move a copy of the servlet's .class file to JBeer-v 1 /WE B4 NF/c lasses/com/example/web' 
; again IhiS will replace lie- previous vcrs.on two class file) 

3 - Shutdown and restart tomcat | c ?m «rmr -..t.q^tmp | 



% cd tomcat 

% bin/ shutdown . sh 

% bin/ start up. sh 



4 - Test the app via form 



Here' J wUt fa* 
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There is still so much to learn. 

The party** flvefi Vdh Imd tferw! whole chapters to cruise along write it little 

code, review lht> whole HTTP request /reRpon&r thing. 

Km ilirrt ,, s siill 2tHl mock exam question* waiting for you fan ihis book, wad 
they sran with \hc nt-\i rlmptt-i'. Unl™* ymu'rr- already familiar witjj setvtel 
dcvotnpmeut and deployment, you really shoutdn'i tixm the page until idVr 
y<uj actually A the tulotfirtl b tliis chapter, 

Nr»l thut wrrr trying to pressure you or t^it il l-l rip you nr anything,.. 
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4 revest AND response 



Being a Servlet 




ServletS live to service Clients. Aservletsjobfstotakeactienrs 

rcquos r and tend back a response The requect might be Simple "gel me itt» 

Welcome page.' Or it might be complex: "Complete myslwpping carl check-out. 
The request carries cruris! data, and your servlet code has to know how to find 
n and how to use iL The response carries the info the browser needs to render 
a page (or download bytes), and your servlet code has to know how to send it 
Or not . your servlet can decide to pass die request to sometoing else {another 
page, servlet. or JSP) instead, 



this is a riew chapter 
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official Sun exam objectives 



The Servtet Technology Model 

1.1 For each of the HTTP Methods (such as 
GET, POST. HEAD, and so on), describe 
the purpose of the method and the technical 
characteristics of flie HTTP Method protocol, 
list triggers that might cause a client {usually a 
Web browser) to use the Method, and identify 
the HttpServlet method that corresponds to the 
HTTP Method. 



1 .2 Using the HttpServletRequest interface, write 
code to retrieve HTML form parameters from 
the request, retrieve HTTP request header 
information, or retrieve cookies from the 
request, 

1.3 Using the HttpServlet Response interface, write 
code to set an HTTP response header, set 
the content type of the response, acquire a 
text stream for the response, acquire a binary 
stream for the response, redirect an HTTP 

response.* 

1 .4 Describe the purpose and event sequence of 
the servfet lifecyele: {1) servlet class loading, 
(2) servlet instantiation, (3) call the init() 
method, (4) call the serviceO method, and (5) 
call the destroy^ method 



Coverage Notes: 

Ail oj I fir ohjeetires iri (his seetinir are (orrred 
completely in this chapter, with the exreption 
e<f the (ookies part of objeetite 1.3. A lot 
if the t outfit! tu this chapter was tftttiiinf on 
in rhapler two, W tti cknptrt two we Mini, 
"Dhh'I worry ttlnmt mrirtuririu^ it. 
in fit is chapter, ynts DO hare h stow tituctt, 
really stitd); and memorise the content. ,\o 
other diaptey tvifl ivirr these objectives in 
fit* tut I, so (/lis U it. 

Do tfti- exercises in tits fltfipttt. rmm the 
mate it til, thru take your first m<wk rutin at tht 
tint of the thaptn. tj jun don't get til IroM 
H0"'» corrert. gti hack through tltt chapter fa 
figure ottl what you missed. BEFORE you 
more tin to (htipier fwe. 

S»tne ti} tilt HtwfL flttltt tjttr.WlOM tllttl MtltlR 

with oust nbjfrfna Inter brrn mured mil, 
chapters 5 «»d (>. because the tjantiotti require 
additional knowledge of some of the topics wr 
don't covet until those (hapten. That means 
there iter fewer mock exittn ifUi-itiims tit ikis 
chapter, tint! mine in Inter rftttptrts, to artnti 
testutg vt>u t>t> tofiif.t ytitt haven't corered. 

important note: whih the first three (hapten 
covered btirkgrnurid isfnrmation, from this page 
forward in the hook, virtually everything yon 're 
going tti see is direetly related to tu explicitly 
petrl uf the eutm. 



* We wcn'1 say much abouL ire objectives 
related to cookies until the Sessions chapter 
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request ■ response 

Servlets are controlled by the Container 

lit chapter two todted at th« CVmtfttoet 1 * overall rote » servtefa life— it 
creates chr rcqutsi ;in<I response oljjrus, creates nr ailoraics .1 new 
ilnv.ul for the lervlet, and r.t\U die »ervlct ? s serviceQ method, paumg the 
request and res]xmse rdVrettcc* i« arj»umeiiis. Heir's a quick review... 




User dicks a link thai has a URL 
to a sen/let 







s 


1 















Client 



ft 



container 




o 

sarvlet 



response 



request 



The Container "sees" that the 
request is for a servlel, so Ire 

(a 

1) 

2) HnpServletRequest 




Client 





container 




servlet 



The Container finds the correct 
servfel based on the URL in the 
request, creates or allocates 
a thread for lhat request, and 
calls the servlet's servtcef) 
method, passing the request and 
response objects as arguments 
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Servtets anef (he Confa/ner 



The story continues. 



I 



Client 



□ 

contamer 




do(Ser( request, -espo-isej 



The serviceQ method figures out 
which servlet method to call based 
an the HTTP Method (GET, POST, 
elc.) sent by ihe client 

The 'Client sent an HTTP GET 
request, so the service!) method 
calls the servlel's doGet() method, 
passsng the request and response 
objects as arguments. 




Client 




container 



response 



request 



The servlei uses the response 

ob 




to the client. Tti 
back through Ihe Container 



Client 



a 



servlet 



container 



r^5pt remits 



The serviced method Completes. 

cn thus ttira-arl oiltior Hioc nr nolumc 

JU LIILr UUkiUU IiIUI4jI U^LiiJ U.I I 4-ilUI I ImM 

So a Container-managed (bread: 
poo). The request and response 
object refefences tall oul of scope, 
so these objects are toast (ready 
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request ■ response 



Put there's wore to a servlet's life 

\V'<- strppe'd into t.lu - middle of the s^ivlefs lile. I mi tti.it still leaves 
aaefltiofu; when was the servtel clan loaded? \Vlim did the servlei's 
constructor ran? H*iw long doe* i he §ervle< object Bv$? When should 
your srrvlci initialize resources? When should it clean up hs 
resource!? 

The scrvlel lil'ecyrle is simple; (here's only one main slate initiuiized 
W ihc servltrt isn't initialized, then it's cither fating faiflaft^^ (runniuK 



its constructor or iml()mclhod), ic?«j 
i unhurt), or it simply does not exist. 



(naming its dettroyO 




constructor 
init() 



dcstrayO 




service() 



Web Container 



Servlet Class 



Servlet Object 



Load clasi 



jju.ii: 
■■ IL itHni 

Iffll U I 

ULm\<l 1 

inmu 
inmai 



AServlct.clisi 



Instfintiut& servlet ^(constructor runs), 



CP 




sen/ieeQ 



TWu n iter* U< "^tet 
i^«ti *ost "»f »ti 




Container t* cj|| lervi^O. 



d-PffcO, ft£. 



«lled only 
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rfte ServieiAPf 



Your servlet inherits the lif ecycle methods 



ServfeJ 



service f ServktRequest. ServfeiREsponseJ 
destrayQ 



Servlet interface 

(javax.servlel.SefvletJ 



t*-^ If? 



no* 

Wow 



tt* API 



GeneritServtst 



Krvi«(S«vlelRequ«».$ervl<tRtos|»n3e) 
inlt{S*rvl9lCanfJg) 

destroy II 

getServlatConfigO 

getSarvlfitlnfo() 

getlni'PaTameterjString) 

gatlndParanwterltomBsl) 

getSarvlalCemtexlO 

log(S<ringh 

tog(Stnng, Thfowabl*} 



GenericServlet class 

(ja'vax.&ervlet. GenericServl et) 

r^:,r il ^ iw: i' dipu i^« 



HtEpServi&t 



S6f«»(Sarvle(R«qu&s!. SenMResponse) 
doGsHHtlfiBervltfRaquBsl, Ht»pS«vis1fl«po<K*) 
doPostiHtlpServletRequasl. HltpSerdHRespnrae-l 

J_U i-ll Uit-C^.J.iHj i— J eJu_ .lj.hn.~- 

JLI ItidLi,! I.Lp^t^l Vlt ir\KL|-.^h: ' II l-J.^bil WIKI,r\Jti^ULII l^ti I 

doCptiofis(H1tpSefvletRequ*s!!, HttpSsrvtetResponsa) 
doPLiliHUpServlelRsquMl, HHpS*wfetRMpon»J 
dnTraDe(HltpSer\p!elReqjest HflpSefvlelRespansE i 
doDalrta(Http5arvletR«iLj*si, HtlpServHRsspons*) 



HttpServlet class 

(javax.SEfvlel.hltp HllpServlet) 

, , . - Lt 3r , Aitratt tU»5 bifid"*"** 

^^^^ 



'ostlH-toSemlelRequesI 



<toP 
myBizMetKodfl 



HttpServletResponse) 



3 



MyServlet class 

(com wrckedlysrnartfoo) 
A]ost of your scr^letnesi is handled by i^ferdais *dWi 
All y*t do n wemde tnt HTTP r.eUodi you need 
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request ; response 



The Three Pig Ufecycle Moments 



o 

initii 



When it's called 

The Container calls imt() on 
(he servlel instance after the 
sen/let instance is created but 
oetore the seller can seme 
any client requests 



What it's for 



initialize your serv et before 
handling any client requests. 



Do you override it? 

Possibly. 

If you have initialization code 
(like getting a database con- 
nection or registering yourself 
with other objects), then you'll 
override the init<> method in 
yourservletdaes. 



o 



When it's called 

When the first client request 
comes sn. the Container starts 
a new thread Dr allocates a 
thread from the pool and 
causes the servlet'S serviced 
method to be invoked 



What it's for 

This rnelhod looks at (he 
request, determines the HTTP 
method {GET, POST, etc.) 
and invokes the matching 
doGetfj doPoatf! etc on (he 
servleL 



Oo you override it? 

No. Very unlikely. 

Voir should NOT override (tie 
serviced method Your job is 
lo override the doGet() and'or 
doPosiO methods and let the 
serviced implementation from 
HIT PServlet worry about 
calling the right one. 




and/or 

doPostQ 



When it's called 

I he serviced method invokes 
doGet() or doPostj) based on 
(he HTTP method (GET, POST, 
eic.) from the request 

(We're including only doGet(} 
and doPostf) here, because 
(hose two are procably the only 
ones you'll ever use.) 



What it's for 

I his is where your code 
begsns! This is (he melhod 
that's responsible for whatever 
The heck your web epp is sup- 
posed to be DOING. 

You can call other methods on 
ofJier objects, of course, but it 
all starts from here 



Do you override it? 

AU/VAYS at mast UNt ot 
Ihemi (doGetO ortfoPostQ} 

Whichever one(s) you 
override tells the Container 
what you support. If you 
don't override doPostf, Tor 
example, then you're telling 
the Container that this servlet 
does not support HTTP POST 
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I Think I got This... so The Container 
calls my serv let's mit() method, but if I don't 
override iniT-Q, the one from 6erericServleT runs. 
Then when a request comes in, the Container starts 
or allocates o thread and carls the servtceQ method, 
which I don't override, so the servJceQ method from 
HttpServJeT nuns. The HttpScrvlet seryit$Q 
method then calls my overridden daGetQ or 
doP*ft(), So each time my dc£et() of doPostQ 
runs, it's in a separate thread. 

0 



Servftt initialization 





Thread A 

Tlio Otmtiiiiier calk in i 1 1 :■ 

i>[i ill. • 1 1 ■. |. i in lain r 

fj/ltf ti* Krvlci [nitanefl is 

crrated but btjoit tin- sen Let 
inn srrvirr any client 
rcipiesls. 

II vim kave inilializatkm 

rode (lifcr getting a database 
mtinection or registering 
yourself hilh other objcct»). 
I hen Vrjti'H override Ike 
urn hiciLiuiJ in your 
scrvlrt man. Othervykc, 

llir in ill.'; method from 

GctWricScrvlci runs. 



The serviced method js always 
called In lt& own stack... 



Ctent request 1 




Thread B 

When ihc firsl rfkfil 
request cninw in. the 
( iiiii.iiiirt starts [flf Erich 
n thread fcfld cwweJ the 
t&rd&t* scrviocO nietho-d In 
be imnked. 

iil normally will NOT 
overridr I he -serv'teei 1 
method, sn the rnif from 
H itjjSi. i \ I i i si ill run. The 
M'niiTi 1 method limirr.s 
DUi Which HTTP nltdlud 

GET, HOST, etc.) i* in 

llir request, mid Invokes 

tin: matching doGcln trt 
cJiiPusti;) method. The 
doGetO attel doPf»t() 
in; kit- Hllfj.S'Tvk-l dotil tin 
anything, so you have to 
tivtTrklr line or hnlli. I hi« 
ill read dies lor is put hack 
in n (Ion tain rr-mnnflged 

pool) wtujn lewfad!) 
cpmpleh s. 



Client request 2 




Thread C 

\NTten thi? second (and nil 
r 1 1 1 1 l- r I i lien I requests comi.' 
in the < cmtainer a$aiii 

t reat i'; ur lifids a another 
thread and msiM^s llir 
serUet's srrvirrfi mclhod (n 
be inviikr. I 

Sn H the .service!) --> dofu'iii 
mclhod sequence happens 
each time (here** a client 
request, At any given 

time. V'ju'Ll ImVc tit k-JLat 

as many nimialilr thrciuls 
as ihrri* arr client request. 1 ,. 

Iil a a. 1 1 I w i In n 1 1 - 

nr polk irs./r<inligitratioii 
r i f tin- Contpjoef. (You 
liuuliL, lor example, have 
a Container that lets, yuu 
specify the ntaximmii 
iiuiuher '.'I ?iirttlltarLei)ll!i 
threads, and when die 
on inli-: i iil' cllem requests 
exceeds! thai, some clients, 
hill jl hi haw M wait.) 
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request rjid response 

Each request runs in a separate thread! 

You might bear people say tbtngs like *E$ch tmtanee trf the «e*vfet^" bui that\ just 
wrong, There aren't multiple ittstaxan i>f limy serviet rlxis, except in one special e;isi' 
(rolled SingieThreadModeii which is inhereiufy evil}, bul we*ne 1101 talking absul thm 
ipe- W case p. 

The Container runs multiple threads to process multiple requests to a 
single servlet. 

And cvm client request generate* a new p;iir of request and respond objects. 



Container 




^ri# This is confusing,., in the 
picture above you show two d iff er- 
tnt clients, i'ncli with it* o.«yn tfir<?!»d. 
W hat ha ppen 5 i f the same client 
make j multiple requests? Is it ene 
thread per clttnt or one thread per 
request''. 

J ^_* On? thread per request. The 
Container doesn't care who makes 
the request— every incoming request 
means a new thread/stack. 



0 : 

^Cje What if the Container uses 
clustering, and distributes the app 
on more than one JVM7 

A: 

£\ Imagine the picture above is 
for a single JVM, and each JVM has Che 
same picture. So for a distributed web 
ap p r the re wo u I d be one in s fane e of 
a particular servlet per JVM, but each 
JVM would still have only a single 
instance of that servlet.. 



0 : 

V- I n otited that WttpServfet 
is in a different package from 
GenerJcServfet... how many servlet 
packages are: th*re? 

At 

Everything related to serviets 
(but excluding JSP stuff) b in either 
ja vax. ter vte t or ja vox. servlet. bttp. 
And it's easy to tell the difference... 
thing's that have to do with HTTP is 
In IhE? javax,servl«t.http package, and 
the {est (generic servlet classes and 
interfaces) are in javax, servlet. We'll 
see JSP-related chapter j later in the 
book. 
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setviet initialization 



In the beginning; loading and initializing 

T&e se-rvlet starts life when C&staioi i iin<.!» i]u< tervlei class fitr, 
This virtually always happens what she Gontattifs starts up (For 
example, when tou run Tonxcat), When \ \w Contaioer Harts* it looks 
for deployed wr l> upps and then Marts scorching Car sen Id daw files. 
(Id the Deployment chapter, well go into more dclnils how* why, 
iuid Where the Container look* lor servleta.) 

Finding ihr claiis is the iirst step. 

LtHtdty i lii- i Ltss is ilic second slop, and it happens tidier on Container 
sitirfufi ox Jin! ditnt list. Your Container might give you a choice ahnul 

< IriLitliim. di il El J J I j 1 j r ]ii;k1 tin- i L.i^s ivhnlrVvi' it W:uHv lir^iil tllcv-, 

of whether vout Contsunei s<'<^ flir servlei ready v-.m\\ or doe* it ju.si- 
iu-iinn 1 when die- Itral cfienl needs ii. st-rvli-t's ftmeif} mrtlmi wMln«t 
run until ihr ftnkt ifjufh mtia&tftf* 




Us first client revest. 



I 



nit() always completes before the first call to service( 



FLEX YOUR NIND 

Why Is there an init() method? In other 
words, why isn't the constructor enough for 
initializing a servlet? 

What kind of code would you put in the intt[) 
method? 

Hint: the init{) method takes an object 

foferan^o argijri-]orit What Hrt yrj^i thin|^ (he 

argument to the mit() method might be. and 
how (or why} would you use it? 
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request response 




Servkt Initialization: 

when an object becomes a servlet 



destroy() 



servr'eeO 

M\ rvrt **( ^ Jt & &° 



The proudest moment of rny life is 
when the Grand Master Contoiner mokes 
m.i a ssrvttt, by making a S&rvierCanfig for me, and 
calling my rnit() . Before that, I'm just an ordinary object, 
But as a servlet, I have special privileges (besides the 
secret handshake), like the ability to log events, 
. get references to other resources, and store 
^tijk \^ attr i butes f a r oth er serv lets .. . 

0 



A «cn In ukacs 1 1 ( .in ,/..,. :„.;,<.,-.; ;,, ..■..■;,„/.;.„' uliiili 
iea|]\ means »rW>' la Ami ft- rfitttt r?t[ut:\l.\\, I 3 ■ 1 ii Willi ,1 
1 ikDsiriifNiL'. Km ill*" i iinsiini inr iinken only mi objtttt Bo( 
.1 an W. Tr> lie n servlct, ihc object needs to be grjuttetl 

When an object become* ■» lervdet, ii gets <*H ttoc unsqu* 
privili -fcs iImi come with bdng* Srrvkl. like the ability to 
use its SzeroietQaMxl iclcunie to ^ct infinnii.uioii from the 
Container. 

H7iy Jo zt'<? rare a£>ouf initialization details? 

Because RomFwhcrc between l]n: irrmftiructor imd the init!: 
method, the servlel u in a St!i)wdingtr' l s*' sfrnht state. You 
mi-gln hiivc- servlet mil i;ili/;H]nn codje, 1 1 k.L ■ getting web app 
configuration info, W looking lip .1 reference i" .utotlirr putt 
■ i-l iht* sppltcatioci, will fail il you run ii too mr/i' in the 
services life. Ii's pttiVj simple though, il jrou remember to put 
nothing in trie servlels runslructor! 

There's nothing thai cart'l wait until inii(i. 



* If your quanlum mechanics is a little rusty— you might want to do a Google search 
on "Scluoedinijer's Cal" (Warning- pet lovers, |ust don't go there ) When we refer 
to a Schroedwger state, we mean scmeihing tnal is neither fully dean or fully alive, 
but in some realy weird place in between. 
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ServletConfig and ServletConiext 



What does 'being a servlet' buy you? 

What happens when a to this? 

servtet goes -from this: 

JO 

^ ^^^^ 



Watch it! 



Don't confuse 
parameters with 
parameters: 



We don't realty talk about these until 
Ihe next chapter, but so many people 
net them confused that we want to 
pi snt the seed W ^enuon to 
fhe differences. 
Start by looking at the- name*: 
ServletConfig has me word xonfiq m 
„ for "configurator ff's ^ ou! ^°V- 
fjme vafces jkjuVe configuf^ ft" (fie 
a^fflwpe'»n*fl. W S your 
soniM mtoW wanf to access thai you 
ctonl want to hard code, like maybe a 

c/iange for as tong as fnrs servlet is 
decoyed and running. To change 
them. you'it^Btemdephytbe 

SeMetContext should have teen 
named AppCorttsxl (but theydtint 
listen to us), because there's only we 
per web app. NOT one per servtet. 
Anyway^'tl get into all thrs^n the 

next chapter-this isjust a heads-up. 



A ServletConfig o bject 



■ One ServletCoflfig object per servleT 

■ Use it to pass deptoy-bme i nlormation to the servtet a 
database or enterprise bean iDDkup name, for example) 
that you don't want to hard -code into the servlet (servtet 



■ Use it to access the ServletContext 

■ Parameters are configured in trie Deployment Descriptor 

A Serv fet Con text 



■ One ServletContext per web app. (They should have named it 
AppConiext.) 

- Use il to access web app parameters (also configured in 1he 



■ Use il as a Kind of application bulletin-board. Where you Can 
put up messages (called attributes) lhat other parts of the 
application can access (way more on this fa the next chapter). 

* Use il to gel server info, including Itie name and version of the 
Container, and the version of the API that's supported 
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request mi I response 



But a Servlet's REAL job is to handle requests. 
That's when a servlet's life has meaning. 

In the new cluster wcU look at ScrvletConfig and ScrvleiContext, but for 
now, we're Higfjing hrto details of die rxquoti nnd retpoiue, BcCAUitC 1 1 1 ■ - 
Servk'tCnnfig and SrrvlrtContrxt exist only in support ynur servlet's One 
True Job: to handle client requests! Sn before \\x look at how your context 
and COtlfig object* van help you do your job, we have to hark up a litllf and 
look at tin- fundamentals of the request and response. 

V"ii alii'.uh km ili.. i yni'ii I U'd .1 1 1 - j i ^ • - 1 .mil i , •!>■.< .I - .H -.. ■■■ 

to tin- doGetf) of doRwtfj tjqcthpd, but what ptwn do those, request and 
respon.se objects t{ive you? What i;in you do wrjth than and Why do you Care? 



•Sharper your pencil 



Label «h mssmg pieces (In* 
empty bones) ot this liiecyde 
timeline. (Check your an swans with 
(he timeline shown earlier in iNs 
chapter.) 

Add your own annotations as well 



Web Container 



Servlet Class 




ASertlel.daii 







Servlet Object 



KD 




QQ 



3 
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Request and Response 



Request and Response : the key to everything, 
and the arguments to serviceO* 



ServletRequest interface 



getAttributefSl'inq) : Object 
g$ICor>tefitLeasfl\{}:lnt 
geffopirfSreomff ' StwiettnputStniam 
getLocslPoftO : kit 
gofPai ameitw'Srm.'g 1 Sim i(f 

fParafTieiefWairie-sf.l fnurapraiicin 
//AMWymoremef/wds... 



Http Servlet Request interface 

{javax. servlet Mp . HttpServletReques-t) 
I , 



^inter/flee" 
HttpServtetRequest 



ffef&*JitP«ft'0 SfriWrj 

gttHe&ltriStmg) Sting 
gatQuerf5irit\gO Siring 

gttMeik&3\! : Shmg 
// MANY mom methods 



ServletResponse interface 

(javax servlet. ServletResponse ) 



^interface 51 * 
SerWdflespof 



sefConfenfLenglfiWJ wid 
gelOuJpofSJresOTj,) : SentetOutputStresm 
gallMiterfJ flwifWifer 
//MANYmoremeJftods. 



Http Servlet Response interface 

{javax. servlet. rittp . HttpServletResponse ) 




adbH&aiieffStoigTiame, String vsfoe) : woiW| 
erfacirfffflsrii'reidURf Siting urfj . Siring 
senrfEwf^rJ void 

//WAWymaTmaijhfflfe... 



"3 cooler Jnd h<adm 



*The request and response objects are also arguments la the other 
HttpServlef methods that you write— rJoGet(). dcPosH;), etc, 
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zhapter 4 



request •• response 



ions 



Q," Who implements thu interface* for HttpServletHeqwest 
and HttpServ let Response? Are those classes in the API? 

A- 

X\ ' Th e Con lai ner, and No. The cl asses ar en't in th e AP I beca u se 
they're left to the vendor to implement. The good news is, you 
don't have to- warty about it. Just trust that when the service!) 
method is called in your servlet, it'll be handed references to 
two perfectly good objects that implement HttpServfetRequest 
and HttpServletResponse, Vou should never care about the 
actual implementation class name or type. All you care about 
is that you'll get something mat lias all the functionality from 
HtipServMRequest and HltpServletReSporlSe. 

lit other words, all you need to know are the methods you can call 
on the objects the Container gives you as part of the request! 
The actual class in which they're implemented doesn't matter to 
you— you're referring to the request and response objects only by 
the interface type. 

Q/ Am 1 reading this UML to Free tfy ? A re Thos* interfaces 
extending interfaces? 

A: 

£\ Yes. Remember interfaces can have their own inheritance 
tree. When one interface extends another interface (which is ail 
they «rrr do— interfaces can't implement interfaces), it means 
that whoever implements an interface must implement ail the 
method! defined in both the interface and iti luperirtte Traces.. This 
means, for example, thai whoever implements HttpServletRequert 
iriLJhl provide implementation methods lot I he mpl hod-* da lar^d 
in the HttpServletftequest interface and the methods in the 
ServletRequest interface. 

Q: 

I'm still confused about why there's a GenencServlet 
and ServletRequest and ServletResponse. If nobody's doing 
anything except HTTP servlefo.-- then what's the pornt? 

A: 

_t\ VJs didn't say nobody. Somebody, somewhere, one could 
imagine, is using the servlet technology model without the HTTP 
protocol. Just nobody we've met personally or read about, Ever- 

M ill. the flexibility was designed into the servlet model for those 
who might want to Use servlets with, say, SMTP or perhaps a 
proprietary custom protocol. The only support built-in to the APf, 
though, is for HTTP, and that's what virtually everyone's using. 




i)aL The exam doesn't 
LV expect you to know 
how to develop with 
non-HTTP se/v/e/s. 

Vou re not expected to know anything 
about now you might use servlets w/fi 
a protocol other than HTTP Ybuars, 
however, stitl supposed to know how 
the class hierarchy works So yoif DO 
have to know that HltpServteiRequest 
snd HttpServlelResponse exteitd from 
ServletRequest and ServletResponse. 
and that most of an Http Servlet "s 
implementation actually comes from 
GenencServlet 



But that's it The exam assumes you're 
an HtlpServfet developer. 
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HTTP Methods 



The HTTP request Method determines 
whether do&etO or doPostO runs 

The client's requ«l, remember, always includes g jptxific 
HTTP Medmdi [f the HTTP Method is a GET, the semen ) 
mcihncl i <itk (lo{Ji-t(i. 11' the HTTP request Method is a 
POST the jervtceQ method calls doPosiQ. 




HTfPfi.t 

dtduv J POST 

5ft-»0/ "" ,0, -Q->JJl.>,l,i 
*"•<•'■ •■"■■»nUppntM„„ J 



■ ■••»- • 

KC1PI ^ 



HTTP re^csti 



You probably won't care 
about any HTTP Methods 
except GET and POST 

fta, tWwrOthra: HTTP I.I Method* 
besides GET md POST. There's aba 
HEAD, TRACE, OPTIONS. PUT 
DELETE, and CONNECT. 

All lni< pne of the eifdtt has n maidiitiij; 
il'^XXXii method in the HttpServlel 
class, so besides doGet(l and do Posit), 
you've gol di)OplLons{}. doHendij, 

Lto'lVnceO, doPutfl, and daDeletnQ. 

I lu-u 'j tin i ili i li.Mii>iri iii tin- m-ivIi-i S. I " I 

for hwdlingduC^oouectOi w it^ ikM p#fl 
ml HitpScrdrL 

Bui while ilis- other HTTP Methods ttiiglit 
mtttlt-T to, say; a web servrv developer a 
serv/W developer rarely uses anything hul 
GET and POST 

Fbi inosi (or prnbably ntf) servlel 
development, you'll use either dot .. i 

t ii simp] | ■ i j ■ - - 1 - doPosflQ (to 

aoivpt and pmeew form ditta;, and you 
wott'l haw to ■ It ink ahum the ojhets. 
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request i response 



So if they're not 
rmpor'tanT to me... of 
COURSE That rneans 
they If be on The 
exam. 




E»di»plc of d response to #n 
HTTP OPTIWS «W 



HTTP/11 ZOO OK 
Server- fcpacHe-to^' 1 ' 
D 3 te-.Thu.20Apr2DM 

16:2Q:lKl GMT 

Allow- OPTIONS, TRACE. 

GET. HEAD, POST 

Cwitent-Lengttr.O 



Actually, owe or more of the other 
HTTP Method s migh t make a (brief) 
appearance on the exam... 

ff you're preparing for the rxam, you shiwlcl hi- able In 
recognize itll of ihem limn B tisl, and have at least ihr briefest 
ii !• .1 ' I vli.il r]u-v-"i,' 1 l.ii l!tl! Mi in" l -| M iii I i!ii.|. 1 1 i in H lii-i i ' 



In tho r»at ssrvrlot world, you care about GET and POST. 

In the exam world, you cars just a liny bit about the other 
HTTP Methods as well. 



Asks ihe server 10 accept Hie body info sttacned to ihe request, and 
give it to the inmg at the requested URL It's like a fat GET... a GET with 
extra info sent with the request. 

Asks for only Ihe header part of whatever a GET would return So ifs 
jusl like GET, but with m body in the response. Gives you info about 
the requested uftL without actually getting back me real imng. 

Asks for a loopbaek of the roqueel massage, to thai Hi* client can soo 
what's being received on Ine other end, for testing or troubleshooting. 



GET 
POST 

HEAD 

TRACE 
PUT 



DELETE s a y S -o (fefere Hung (resource / filei at the requested URL. 

OPTIONS Asks for a lisl of ihe HTTP methods to which Ihe thing at Ihe 
requested URL mi respond. 

C ONNECT Says io cotmtt fat (he purposes of tunnel ing 
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GET '.it us POST 



The difference between ftET and POST 

POST has a body. 'thxCi file feeji H"ih tiK I amd POST eat) 
sh ikI ]>nri»Tiit'icrs, bm with lit j; the para m e te r data i* limited 
In what yfni tiiii siull into ihr Request line. 



The HTTP 



TV 



" nH^f **** 



i 



GET ■■«.| ( i.rr/Si;.lsrtBeefTaste.j5pTcolor=darl!ataat(=ffi»Uy HTTP/1 .1 
Host: www.wickedly5maft.com 

User-Agent; Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1 .4) Gecko/ 
20030624 Netscape/7.1 

Accept: teKt/xrnl.application/Mmt.application/Khtmi+smLtext/htmliq^OJ.teMt/ 
pJairi;q=0-8,videa/x-mngjrnage/pngjmage/)peg,image/gif;q=-OJ, ,L / 4t ;q=O.l 
Accept-Language: en-us,en:q=0.5 
Aecept-Encodinej: gz:ip,deflate 
Accept-Charset: 150-8859- l,utf-8;q=0.7,*;q=0.7 
Keep-Alive: 300 
\ Connection: keep-alive 



Tki HTTP n HO re^uett 

******* / r _jL__,/ 

b POST /advisor/selectBeerTaste, do HTTP/1.1 



Holt: www.wickcdlyimart.com 

User-Agent; Mozilla/5,0 {Macintosh; U; PPC Mac OS X Mach-O; en-U5; rvrl,4) Gecko/ 

TKe ^ues-t V Accept; text/xml,application/xml,application/xhtml-i-xnril,text/html;q=0.9,text/ 
plain ;q=0 i B ( VidEo/x-mng,image/png,image/jpeg 1 image/gjf;q=0,2,*/*^cj-0, 1 
Accept-Language: en-UG.en;q-0.5 
Accept-Encoding: gzip, deflate 
Accept-Charset: ISG-B859-1 ,utf-S;q = 07,*;q=0,7 
Keep-Alive: 300 

Connection: keep-alive ^ 
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request ; < response 



Sounds like the 
difference between SET 
and POST is the size of 
1 the parameter data you 
V eon send? 



Mo, it's not just about the size 

W talked about other issues with GET irt chapter one, iSeriMtrirjer! 

When you use GET the parameter data shows up in the browser?! 
input bur, right alier actual URL (and iepafat£d with u "?"]. 
lMi:ik>inr ,i -evil. ii lit in uliii h Mill Sh'Dlilit mil wml I In | i;i i .1 inc[i-i> In 

be visible. 




So, security might be another issue 

SrjlJ itimilii.T iss ii i- i-. u'Ik'iIht vnu need or wanl end-users to 
be able to bookmark tlit* request page. GET requests ea.11 be 
buoknwked: POST requests cannot Thai might be reaE) 
important iT ypa have, » pane tluii K-i» umts *|k-uIV search 
criteria. Tin- usm might wani m 1 isne 1j;k Is ;i vvr-t-k later mid try 
ilir srtmr icarch ngstB now I hiii thcrc'j new data <jh tin- $ervcr. 

Bui h,:mfn nine, security, unci booktiltirkiri^. these-** another fi u< i<il 

diflcrcticc between (iLT and POST— the way they're sufipawl 

to be iif-cd. CET if. meant to 1>c used for gtfiing things. Period. 
Simple retrieval. Surt\ you mipht use the parameters to ]iu Ip figure 
Dtri whai to Send bat fc, hut the point is- yoU'ee nttt making any 
changes mi ihc serverl POST is meant to lw used for sauting r///fo 
//k br jufttmrtl- Thimntkl i»- us simple ju query parameter* u*ed 
in lifriirr nut whal (i» send back, iu*<i with a t'ET, luU when you 
third* of PQSX think: pfoM Think: use the data from the Pt >ST 
body to ekange something 011 (tie iemr. 

Ami that brings up antilht-r issue-... whether the request is 
Uttmpoteitt. If fit** ytiu Cduld m*i into the kind of (rouble a liulc 
blur pill exeh fix. [[' you're not I';imi1i;ir with the way the term 
"'tdempottnt" is used in the web world, keep reading... 
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the nap-ittempatem request 



The story of the nofHdempotewt request 

Diane has a itgmd, Slip's n yiujj desperately d> pim-h;^' Head F)TjE| Kmttklfj 
trmn the Wickcdh Sumri unimr shop windi, unbeknown*] to Lhriue. ts mil) 
in lifia. Diane's low on rnemey — slit* h;is just enough in berdebil hccqVotI c> cover 
o«f book, She considered Inlying directly I'mm Aniaznn fir itit" O'Reilly. corn site, 
but decided she wanted an (wtogyafihtd copy, available only from ihe Wickedly 
Siii.ii i <\w. A flu tii i- ^lic would later come to regret;. 



(?) Diane hits the CHECKOUT 
button. (She submitted her 
bank account info earlier.) 




Browser sends on HTTP 
request to the server with 
the book purchasE info and 
Diane's customer ID number. 



The Container sends The 
request to the Checkout 
servlet for processing. 











> 



Is 



■ 

Wickedly Smarts Web 
Server/Container 




Servlet electronically debits 
Diane's bank account. 




Remote, bank 
account server 



Servlet updates the database 
(takes the book out of inventory, 
creates a new shipping order, etc.). 




0 



Servlet does rJCT 
send cn obvious 
response, so Drarte 
still s:ees the same 
shopping cart page 
and thinks 
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Browser sends on HTTP 
request to the server with 
the book purchase info and 
Diane's customer ID number. 













> 



J 



Wickedly Smart's Web 
Server/Container 



Our story continues 



request - • response 



The Container sends the 
request to the Checkout 
nervier far processing. 




Wickedly Smarts Web 
Server/ Container 



The ierviet does not have a 
problem with 'Diane buying the 
same book she bought before. 




Servlet electronically debits Diane's 
bonk account for the second time. 



Diane's bank accepts the debit, but 
■ her - hefty overdraft fee. 




Remote bank 
account sewer 




Remote bank 
account server 



tvemuairy uiane 
navigates to the 
Check Order Status 
page and sees 
that she has TWO 
orders f pr the 
knitting book -. 



This is not rjqhr. I 

nittunl 1u buy unfy ONE buuk. 

What stupid web opp developer 
made THIS? It should have 
recognized a duplicate 
transaction... 



HeNo bank? This 
wickedly stupid Kieb 

programmer made a 
mistake . 



Ma 




you are here * 113 



HTTP methods 



irpeti your pencil 



Which of the HTTP methods do you tin ink are (or 
should be) idempotent? (Based on your previous 
understanding of the word and/of the Diane double- 
purchase story you just read.) Answers are at the 
bottom of this page. 

□ GET 

□ POST 

□ PUT 
J HEAD 

(We tefl off CONNECT deliberately, since it's not part of 
HtfpServieU 



FLEX YQUft MIND 



(And it's not just ONE thing... there are probably 
several problems the developer must fix.) 



What are some of the ways in which a developer 
could reduce the risk of this? 

(Hint: they might not ail be programmatic 
solutions.) 

w<fs $ dilH 

aifl rtq ^u3;odiusp| Dsjspjsum )ou si isod "(;,up|ficrtje jnq) jjssnioyi 
poiltsiii OiaQOp jLa)Q)Euap|-uciu e ajuw isrtfO noA 46110141 us^a 

iua]adujapi sb md PV* 31 3H 133 s ajep.jp nads 1 |. d iiH mi 
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request ai response 




Being idempotent is GOOD. It means 
you can do the same thing over and over 
again, with no unwanted side effects! 



idempotent 




NOT (dsmpot«mt 




Servlet uses the POST 
data to update, the 
database. 




Client 



Servfet sends back a response 
with a generated HTML page, 
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idempol&nt 



POST is mi idempoteht 

An HTTP GET is jtiKi fot&tikg tiling, and to twa 
supposed ?<3 flump- anythii i ^ <mi the server* So a GET 
is. by definition (and acfflfdlafj tr> die HTTP spec) 
idcmjjoum. Ii cm be executed nmnr than once 
without arty bud side effects. 

POSI is mtfi idrmpuient —die dam submiitfd in tlic 
body of a POST mighl he dcsiincd for a transaction 
dial can't be reversed. So you have to be careful with 
yum doPostd ftmctionathyl 



GET is idempotent. POST is not. 
It's up to you to make sure that your web 
app logic can handle scenarios Mho Diane's, 
where the POST com ft a in mora than once- 




GET is always 
considered 
idempotent In 
HTTP 

even if you see cade ot\ _ 
the exam that uses the GET 
parameters in a way that causes 
stfe-effects' tfl other words. GET 
is idempotent according to the 
HTTP spec Bui there's nothing 
lo stop you from implementing a 
nofwtfempofwtf doGetO method 
Tryovr servtet The client's 
GETiequest is supposed to be 
tfempotent, even fiikeA ^ * 
with the data causes side-effects- 
Always kuop ft mind the difference 
between the HTTP GET method 
antf]"* 



JVote- i^crt ave icverat d ttfatw i use* of tbt word 
"idempotent", *e.Ve wd*tj it in the HTTPAeirvlet way 
■to »ea* that tfce a»e re ^med: tan be made twite with 
no negative tonie^uenfes on the terser ftfc do *not* 
uie "idei*pite»t" to *<ai> that the sA^e revest alwjyt 
tkve Mn4 response, i«d *e do WOT tn»t > 
request ha* NO side eWefrU 
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request anti response 



What determines whether the 
browser sends a &ET or POST request? 



<A HP-EF="hCtpi //www.viicrl£edlyaMiirt.toja/index.htflil/™>c!lick ]i&te</A> 



-ffarni method- "POST" act ion= "Select Beer. do 
Select beet characteristics^? 



<select name= "color" size="l"j 

<coption>light 

^opticus camber 

<opt iari>brown 

<opticin>dark 
</ select-? 
<cerjtox> 

<input type="SUBMIT"> 
</center> 
■-/form-- 



- bffJ 




^ T 



<form action-"SeiectBeer.do"> 
Select beer characteristics<p> 
'-select na3ne="Color" size="l"- 

oa pt i on > light 

<opt ion> amber 

<optiGn>brovm 

<; center > 

<input type="EUBMI T" 
</center> to« a 1 

</form> 



^*SE2I 1ST*-** 
r «^ Wit. ^ Jr^T 
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forms and HTTP 



POST is NOT the default! 

If vh'H d«ni'i pal method^' POST 1 " into your 1»i'm, the default 
i?i li 1 1 HTTI' (JET request . Thai means llur browse *t-nds iIm 1 
]>:ir;inif irrs in iln 1 ivijucsi lifiidiT, lull that's tin - lt-;isi itl your 
problems. EtcctOUGC if the resqiicsi nmio in as ;i UET, thai means 
you'll run into big troubl? al runtime if y<<u have only ;i ttoftjatfl 
and: not a clcitjelO in your servlet! 

If you do this: 



And then this: 

public class BeerSelect extends HttpServlet { 
public VOtd doPost (Hi tpS« •,' le L Request teqd 
// code here 



est, Fit tp5ervJ.etRespori.se response) 
throws loException, SarvletExc&ption ( 



I 



Mi 



You'll get this: 




What if I want to support both 
GET and POST from a single servlat? 

Developers who want to 
support both methods usually put 
logic in doGetO, then have the 



doPostO method delegate to the 
cfoGet{) rrvethad if nefeiia'/, 

public VO±d daPast ( , , , > 

throws . . 



doGet (request, response) ; 
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reques t rjid response 

Sending and using a single parameter 



HTML form 



■-torFi met. hod- "POST" action-"SeIectBeer.dci"> 
Select beer characteristics<p> 
•-select name =" color" size="l" ■ 

<option>amb B r TV»« brew* «« « *a*ed 

<opti 0 n>darle ) W ^ «**-Tl«' 3 

</ select > * 
<: ca.fi teus 

< input type=-"SUBMIT"> 

</ form? 



HTTP POST raqua&t 



POST /adYlsoWSilectSeer.do HTTP/hi 
Host: www.wickedlysmart.com 

Usef-Agent: Mozllla/5.0 [Macintosh; U; PPC Mac 05 X Maeh-O; en-US; rv ; M] Geeko/2<HJ30&24 

New ape/7.1 

Accept; text/xml.applkflttoo/Mml.ftpplicatlon/xnrml+jtrnLtexl/htrn^qKCi.S.texl/plaiii^^O.eKVideo/x- 
mng„i mag e/p ng .ima ge/j peg, 1 m a qe/gi f ,q=0 .2, * / *;q =0 . 1 
Accept -Language; en-us,en;q=0.5 

Accept-Encodmg. gzip.deflate „ 

Atcept-Charset: I SQ-&8 S 9- 1 , ulf-ft;q=0.7 t * ;q=0.7 *e*"e*b(T, ihe ko*^ yg&tffa j, 

Keep-Alive: 300 f 0 * 00* £ Kjy e to worry jfe, 
Coriftectldh: keep-all«e ft like total 



color-dnrk 



Serulet class 



public void doPost (HttpServlet Request request, HttpttervletResponse response) 

throws IQExcepti&n, ServletElitception ( 
Ug coJarPai-am - r GtquG s t . gjo t Par arao t er ( " col or " } ; 
t 1 more enliqhtenirtg code bere. . . * 

T 



collar,*, Kit a value of *dWc") ,n *"* 
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farm parameters 



Sending and using TWO parameters 



HTML form 



<forin methol="POST" action="Se!ectBeerTaste.do"> 
Select h&OL characteristics^* 
COLOR: 

<seleci: name -"color" ttzw&?&> 

<op t ion>light >. T . ^^^l^d^^^^I^'r" 

<opL±Dii>d*rk 

</seJect> 
BODY: 

■r^-ei^el; name =' J body" a i He-"! *> 
<option> light 

< centers 

< input type-*SUBMrT*> 

</c*ttfcwr> 

•-'/form> 



HTTP POST request 



POST /advisor/ Be lectBeerTaite.de, HTTP/l,! 
Ho«: www.vvickedlysrhart-eom 

User-Agent: Mozi|la/5.0 iMacintosh; U; PPC Mac OS X Mach-O; er-US; rv;Ml Gecko/30030624 
Netscape/?. 1 

Accept: textfmil.applicatmn/xml.apphcatlon/xritrnl+x^^ 

mngjmage/png,image/Jpeg,irnage/gifrq=;0.2,*/ l ;q=<t.1 

Actept-langjage: en-us.en;q=0.5 

Accept Encoding: qiip.dcflatc 

Ac cept-Ch a r set: I SO-8B59- 1 . u tf-B:q=0.7. ' ;q=0_7 



li-'.-.-..-. M(|MU 3r%A 



Connec tion: teep-a Mve^ ^ ^ p ^ h3s ^ 

col or = d a rk & h od y = h e □ 



Servlet class 



public void doPost<H.ttpServIet Request request, HttpSeivletResponse response) 

throws iOException, setvletExceptidu | 
String colorParam ■= reciuest. get Parameter col or" } ; 

artiing body f'd ram = r«queat . getParamater ("body") ; nfo* the S-fcr^ variable ioURsrj*, 
// more code here has a vaLe of "dirk" and bodvPav-jm 
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request jj.tu response 



.itmiP values for a singte parameter! That 
BSSSf You can have mu ' 1| P , ™"" J „ terV(i , ue "(> *h«t returns an 

< f0 nn method=POST 

3 ction-"£electBee£.do > 
Select beer tfharacteriatlcs<p> 

Can Sizes: va i ue ="12oi'> 12 OS- 4 *** 

Sit type-checkbox nu^zes v^iue 
<br><br> 

<center> 

<in P ut type="SUBMlT"> 

<:/eenter> 
</fqrm> 

,„ ** *»1 « * •«"* ™'™ s a " ** 

M. «rt fo M* « * *"* ' ua " ° r ' e * 3 ' ** 

SCI1 ™ [, ..... . ^» ura *f l,L " r> 

pill-.. pr3.ntJ.ni ^ ■ 



< assume that "<rt" * 3 Prater you 9°' frc« 
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rite HrtpSen fetReques f object 



besides parameters, what else 
can I get from a Request object? 

The Servletftequesl :nicl HtipServleiKei-nirst interlaces have a ion 
of methods yt>u can i -nil, but you doii*i need to memorize them aH: 
On your own, jtou rW#il should toot at the full APT For javax.sw In. 
n-i yktRequpfl iiiul jflV^3Li^rvJetHrjttp.HttpScr\'letRcfqiJest, Inn here 
we'll look M only ihe methods you're most likely 1cj usi? in your work 
• and which might also show up on tht 1 exam). 

hi the real world, you'll be htcky (or unlucky; depending on your 
perspective), to use more than 1 5% of the request API. Don't worry i/' 
you arettt ittnr about hat* ot why yon '<! ti* f ruth of ih*>se wi'W mm 
more details inl sotlH' <if ihtiu lespi-cUilh run kirsi later lit the htwtk. 



Th* client's platform and browser info 



String client - request , getHeader ( w User- Agent" ) ; 



Tha cookies associated with this r*quest 



Cookie [] cookies - request .getCaofcies () ; 



The session associated with this client 



HttpSession session - request. getSess ion {) ; 



Th* HTTP Method of th* request 



■ ■ :ng theHethod - request.getMethodO ; 



An input stream from th* request 



Input, fit ream input - request -getlnputS t ream 0 j 



Servlet Request interface 

(j avax . &ervJel. S e rvleiReq uest) 



g&tlnputStreamO 

getRemokePortQ 
g?rServerforf(f 

getParametefValuesfString) 
gt-tParnneitrNfimtsf) 
il MANY nwre methods 



HttpSorvJctRoque.it interface 

(favax.servlet.http.HttpServlelRequest) 
J 

















n& t fn iT-Jp a fte rV £ t n ntr \ 








g?fSessionf'J 




^AMWy.rrejrffmetbm^.. 
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request .-ml response 



hie>?tiorw 

Why woul d I eve r want t* get a n I nputSt ream fro m the req uc s t ? 



A: 

£\ With a GET request there's nothing but the request header info, In other words, 
there's no body to care about. BUT.., with an HTTP POST, there's body info. Most of the 
time, all you care about from the body is sucking out the parameter values, (for example. 

•tubr-ct.Hk' i using request .get Para riieterf), bill tho>e Values mighl be large. I( is aha 

possible to create a servlet tliat proceses a computer-driven request in which the body 
of the request holds textual or binary content to be processed- In this case you Can w,p 
the getReaderargetlriput Stream methods, These steams will only contain the body of 
the HTTP request and not the headers. 



What's the difference between tjetHeaderl ! and get hit Header I )? Far ai I can 
tell, headers Lire always Strings! Even the getlntHeaderf) method takes a String 
representing the name of the header, so what's the mf about? 

A: 

£\ Headers have both a name [like "User-Agent" or "Host") and a value (like 
"Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rvij.4) Gecko/70030624 
Netscape/ 7.1" or "www.wicked ly smart, com"), The values that come back from 
headers are always in a String Form, but For a few headers, the String represents a 
number. The "Con tent -Length" header returns the number of bytes that make up the 
message-body- The "Max -Forwards" HTTP header, for example, returns an integer 
indicating how many router hops the request is allowed to make. fYou might want to 
use this header if you're trying to trace a request that you think is getting stuck in a 
loop somewhere,) 

You could get the value of the "Max-Forwards" header by using getHeaderO: 

String forwards = request. getBeader ("Max- Forwards" ) ; 

int forwardsNutn = Integer, patseTnt (forwards} ,■ 

And tha t works fine. But if you know the value of the header is supposed to represent 
an in t, you can use getlntHeaderf} as a convenience method to save the extra step, of 
parsing the String to an int: 



int f orwa r ds nurn = ceqiiss t . efe tin nlelidei- { " wax - ro twards " j i 




L* lha, ^oorftrtO met™. So 

S remote to the server so 9^rv 0 lePu^) 
Remember If you 1 ™ * aavtel, gemote mm ff" 



T! * Irenes between gafLc^JPo^a^ 
%ys. to wfiitf port was the fW&t SENT 

me serve* >s SESq L P^W" ^ Int 
app eff I tendfe mu/f/pto efenfs at tfw same 



fjfecyete review 



Review: servkt lifecycle and API 



BULLET POINTS 



■ The Container initializes a servlet by Icadi n§ !he class, 
invoking Ihe servlets no-arg constructor and calling ihe 
servtel's inil() method 

■ The imt( ) method {which Ihe develops* can override} is 
called only once in a servfel's life, and always before the 
servlet can service any client requests. 

■ ThD imt() methQd'flfres the seizor ;j<«:ss u> nici Sytv- 
letConfig and ServlelContext obiects, which Ihe servtet 
needs to gel informal™ about the servlet configuration 
and the web app. 

■ The Conlainer ends a servlet's life fry cal lino ii& destroyt) 
method. 

■ Most of a service's life is spent running a serviced method 
for a client request. 

■ Every request to a servlet runs in a separate thread' 
There is only one instance of any particular servlel class. 

■ Your servlet win almost always extend javax servlet http. 
HttpServlei from which it inherits an implementation of 
the serviced method that takes an Http3e?vlelReque&! 
and an HttpServtetResponse. 

■ H ttpSorvlet extends jauax.se roletCenertcServlet— an 
abstract class lhat implements most or the basic servlel 
rrsRihndfi 



Servlel classes (except those related to JSPs) ar 



You can override ihe imt() method, and you must override 
ar least one service method fdoGetfl. doPosM, etc ) 




javax.sen/iet.SBFvlet 




atrvhe(\ 

imifServktConfig) 
destnyf) 

gat&ervfetConSgff 
getSer/tetlnfofj 



initlServlstConfig} 

dEatroyO 

ge*5evfetGwifig[) 

gelServtetlnfod 

jellnitPafameleiKStnng) 

gelinitParameterNsmegO 

gelSentetCoritextl) 

IcglStnngl 

bg(Stnng,ThrwsbleJ 



} avax. servlat. http .HttpSa rvlel 



service (HttpServletRequesI HttpSerYtanesponse) 

service (ServletRjequest, ServlelRe&ponsel 
doGet(HtlpServlelRequest, HltpSefvletRespwisef 
(toPos(|HttpSefvlelReques1 HttpServletResponse) 
ffcHeadiHdpServle;Request, HtipServfelftespfflise) 

.-■.-.I "r Tin.- r- - H - r - .ifi lahP^ni iu~r ! > l-r- - -' — ar3con.-.-.:c,i 

tfoPull'HtlpServletRequest, HttpServlelRespofise} 
doTraceiHttpSerJelRequesl, HttpServletResponse) 
doDeletefHUpiServlstRequesl. HltpServlelResponw} 
getLastMtxtrfedlHltpSer^elRetiueit) 

zs 



com.wid 



dePasljHHDEEi 
myBizWetiodtj 
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request ' response 



Review: HTTP and HttpServIetRequest 



BULLET POINTS 



■ The HttpServlets daGelfl and doPostf ) methods tafce an 
HttpServietRequest an<J an HjtpServtetResponse. 

» The service!,) method deter mines whether doGetQ or 
doPostf) runs based on Ihe HTTP Method {GET, POST, 
etc.) of the HTTP request 

■ POST raquesis have a body. GFT requests do not. 
although GET requests can have request parameters 
appended to Ihe request URL (sometimes called 'the 
query stnng"}. 

■ GET requests are inherency (according to the HTTP 
spec) idempotem They should be able to run multiple 
times without causing any side effects on (tie server. GET 
requests shouldn't change anything on the server. But 
you coiritf write a bad. non-idempotent doGetj) method. 

■ POST is inherently not idempntent, so rt's up to you to 
design and code your app in such a way thai if the client 
sends a requesi twee by misiake, you can handle it 

■ If an HTML form does not explicitly say "memod=POST", 
the request is sent as a GET, net a POST If you do not 

* You can get parameters from the request with the 

oetParameterf paramnarne') method The return value is 
always a String 

■ If you have multiple parameter values for a given param- 
eter name, use ihe getParameterVatuesC'paramnamel 
method that returns a Stnng array. 

■ You can get other things from the request object including 
headers, cookies, a session, the query string and an 
input siream 



5#rvl«t Request interface 

(Java j . servlet. ServletRequest) 



geiMributef Siring) 
getCtmtsnlLenglhQ 
getlnputSteamti 

geiLwsi'PpftD 

qetRenKitePortO 

fjetSen/wPortf) 

gsiPsrsmeten'SinrtgrJ 



/.'MANY more methods 



HttpS*rvl«tR*qu«sl interface 

(javax servfet hltp.HttpServletRequest) 
± 

<<nterfo«» 
HTTPServtetRequest 



geiConfartPsrhf) 
gatCoohasfl 

gettnftteadeilStnng) 

getAfeWJ 

getQueryStringQ 

getSestioriQ 

# MANY more methods.. 



you are here * "125 



the WftpSerWeWesponse ofc/ecr 



So tbatls the Request- 
now let's see the Response 

['lir response is wW.w goiei hark to the client. I h' 
iliinn ih>- liimvsr']- gets, parses, ami renders lor (lie 
user. Typically, you use the response object to gel 
.in uiilpul stream iuMiully .1 Writer) and you use thai 
(tWsajB to wt he iln HTML>ih sfjme other t^pe of 
rutitrnl I lli;it |JQ<r» liack fa lilt' clit-nl- Tlie n^pimsr 

(iUji-L 1 tiM other idhIhkIs lit'sidf h juil iln- l^O 
inKptii, llnniffli. and wr-'ll look ;il sonic of ilicm in a 
bil mfjjr detail. 



Servlet Response interface 

(javax servlet.ServletRespon&e} 



snfCortlenlTyfNSfJ 1 

setWriterf) J 

SGHContefttL&ngthO 
ffMANYmwe methods 




HttpSer vie t Response interface 

(javax.servlet.http. HttpServletResponse) 
I 



se™'Pecrtifiecf(J 
//JWNYroore methods.. 



Most of the time, you use the 
Response jusf to send data 
bact to the client- 

You call two methods on the 
response- SetContentTVpcQ 
and getWrilerQ- 

After that, you're simply 

doing I/O to write HTML (or 
something else) to Ae stream. 

But you can also use the 



send errors, and add cookies. 
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request response 



Wait a minute.,, I 



t$ send HTML 
because 



serviet 
ugly to format 
it for the output stream.. 




Using the response for I/O 

OK, yc». we should be uMng JSPs mllicr llian 
sending HTML hack in the response uLLtpui 
stri'Liui from li .itTvki. Formatting HTML to 
stkk in aft output nirciiiirs printlnO lUethod 
iivth. 

lini ili.ii diH'Mh'i nit'iin ymfU tifver have in 
work An output stream frurn (sour sen In. 

li'/ji-.' 

1) Yoill huslillH i<1iT I11L'J;IlI 1 1 ■ ■ I -.l.ipp<i|l 

JSPs. There are plenty of older servers and 
containers out there ihai support iervle-ts but 
iKii fSP*. sr> you're stuc k with it. 

2) You di.m't li.ivr tin 1 Option <U" usiii^jSi 1 - I'll 
some other reason, lib-, vim have ita incredibly 

srnpiil iii.iiuMjiT who WOn'l lei vim ustJSPs 
btitiaUSC in t99fl Iilh l>rnihcr-in-L;iw tnkl him 
Hi," |Sl' were b Lt-cL 

3) Wh<i uid thai HTML was the only ilim^ you 
rniijrj *cnd bjick in d rc^pon^c? You mishL *cnd 
BOfnethmg vt/itr tlian HTML hack to the client. 

Something for whit h an output wean) roafc s 
perfect sense, 

Tiffin the pagr for an example... 
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sending bytes in the Response 



Imagine you want to send a JA£ to the client.,. 

L. i \ say ymiYr created a downjaftd page when- (he dfeiu (-an g« cod* 
frosmJAJl fiks, Instead c»r sendhrg back an HTML page, the response. 
w.mi;iiiis ibe bytes representing ilirfAR. \lm matf the h^t«a "I the JAR filr, 
then write them K> ilu- rrsprinst-'s nuipui sivriim. 



(J) Diane is desperote to download the 
JAR of code for the book she's 
ta learn servlcts and JSPs. She 
navigates to the book's website and 
dicks the "cede- jar" link, which refers 
to a senrlet named 11 Code .do". 




Browser sends on HTTP 
request to the server wirh 
the name of the requested 
szrvlai (-CGdfs.da") 



The Container sends the 
reouest to the Codefteturn 
servJet (mapped to the 
name "Code.db" in the DO} 
for process i rig 



f2> The JAk starts downloading 
onto the client's machine 
Diane is pf eased 



The Codefteturn servlet gets the 
bytes for the JAR, then gets an 
output stream from the response, 
and writes out the bytes 
representing the JdR. 





The HTTP response 
naw holds the bytes I 
representing the JAR 




response 
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request and response 



Servkt code to download the JAR 



//a b'Jjuih of imports here 

public ciasii Cod&FfeLutn extends HttpSErvlet ( 

public void doGet (Eft tpServiet Request request, HttpServletFe;?poni5e response! 

throws lOException, ServletException [ 



response. setContentType < "application/ jar") ; ^^j^ ^^T^ ^° 



ServletContejct ctx - getSarvletContext ( ) 
[npi si-Stream is - ctx .getRegourc^Afi&tresmrvS-ifio'KOodo- jar") ; 



irit read = Of 

byte II bytes = new byte [1024 ); 

ffijtpijrstt^am *>s = rospon^o.ijctOutput.StreamO; 
while ((read - is. read (by-be?) } !- -1) ( 
os . write (bytes , 0 , read) } 

} 

os. flush 0 ) 
ob. close 0 ; 



W* the V<y p*i but it's >st ff*i 

old \/CM Nothi^ special, jwt tea* the 
JAR bytei, ther write the byte* to 
th* output *trea«* that vue yt (m» 
the ttspor.se objett 



Where wa i the " bo okC ode. jar" JAR file located? In other 
word s, where doe s ihe gei Re sourceA sS i ream ( ) mem on LOOK t o 
find the file? How do you deal with the path? 

A: 

j\ The ge-trtesourc#As5tre,am(] requires you to start with a 
forward slajh ["/") , which represent ihe root of your web a pp, 
Since the web app was named JerDownlond, then the directory 
structure looks Like the directories in the picture. The JarQ own had 
directory is inside webapps (as a peer directory to ail the other 
web app directories), then inside JarDownload we put the WEB- 
tNF directory, and the cod? JAR itse-tf, So the file'bookCode.jar" 
if fitting at the regit level of the JarOowniaad web app. < Don't 
wotry, we'll go into deep penetrating detail about the deployment 
d i rec tory struct u re wh en We get t o t he dep loyment c ha pf er, f 




boDNCod'e.jar- 



web.xrril 
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content type 

Whoa. What's the deal with content type? 

Vim might he wondering about ifcts Line: 

response . setContentType { "application/ jar") j 

Oral least xim Jwuld \>r. You have ta tel] the browser wtert ypit'rc sending Wk. so the 
browser can rfo t^e rty/iJ thing: I.iiiikIi ;> "fielpt-r" ;»pp like a PDF virivrr ur s ided 
player, rrmlrr the HI ML. ibve tjie bytes di the ttaportsc a downloaded file, etc, And 
since you're wrmderinj;. yes when Vfe say fontrnt tvpr we me;in die s;»ne tliinii MIML 
type. Content type is an HTTP header that must he included in the HT*1'P response. 




O. en 1 /Browser 



+ + + + + + + + + B P 



Server/ Cert tamer 

HHH + + + +hr , r, r -I h ■■ r r r i . ■ r- - H H + ++ ++ ++ ++> <■ H 



Common MMF types: 

applicatian/pdf 
vkteo/qufcktlme 
application/java 
image/jpeg 




application/x^ip 



You don't need to memorize a bunch of content types. 



q you should Know what setconteni typeo does, ana now you use it. but you 
don't have to know even the most common content types except text/html 
What you need to know about setContentType() is mostly common sense... 
'-r\ | . for example, it won't do you any good to change the content type 

KClelX AFTER you write to the response output stream. Dun. But that does 
- v mean that you can 't set a content type, wnte some stuff, and then 

change the content type and write something different. But think about 
it— haw would the browser deal with that? It can handle only one type of THING at a 
time from the response 

To make sure everything worts correctty. your best practice {and in some cases a 
requirement) is to always call setContenlTypeQ first. BEFORE you call the method that 
gives you your output stream (getWnterfj orgetOutputStreamO). That'll guarantee you 
won't run into conflicts between the content type and the output stream. 



<HHHH+^ - >■ f B ■ ■ ■ 
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request .).•• ■' response 



0 : 

Why do you havn to s*t the fnntent 

type? Ca n't server* fi jure it o ut from th e 
extension of trie file? 

A* 

Moil si'iv^rs urn, foi sialic c antem , 
In Apache, Tor example, you can iet up MIME 
type* by mapping a specific file extension 
Uxt, .jar, etc) to a specific content type, and 
Apache will use that to set the content type 
in the HTTP header. But we're talking about 
what happens ins idea sen/let where there ft 
no file! You're the one who it sending back 
the response; the Container has no idea what 
you're sending. 

But what about t hat test example 
where you read a specific JAR file? Can't the 
Container see that you're reading a JAR? 

A- 

No, All we did from rhe servlei was 
r ead the bytes of a file (th at just ha opened to 
be a J AR fl le), and tur n a ro Und and w ri te t hose 
bytes to the output stream. The Container has 
no idea what we were up to when we read 
those bytes. For all it knows we're reading 
from one type of thing and writing something 
completely different in the response, 

n> 

V£* Hon< can inn dour What I he common 
content types are? 

A: 

t\ Do a Google search, Seriously, New 
MIME types are being added all the time, but 
you can easily find lists on the Web. You can 
also look in your browser preferences for a list 
of those that have been configured for your 
browser, and you can check your Web server 
configuration files as well, Again, you don't 
have to worry about this for the exam, and it's 
hot likely to cause you much stress in the real 
world either. 



0- 

*fc Wait ■ second... why would you us*> a 

serviette send back that JAR file when you 
can just have the web server send it back as 
a reso u rc e7 I n ot her W o rd s, why wo u I dn t 

you have the user click a link that goes to 
the JAR instead of to a servlet? Can't the 
server be c o nfig u red to sen d ba ek the JAR 
directly w ithom even GOING th rough a 
servlet? 

^L* Yes. Good question. You COULD 
configure the web server so that the user 
clicks an HTML link that goes to, say, the JAR 
file sitting on the server (just like any other 
static resource including JPEGs and text 
files), and the server just sends it back in the 
response. 

Gut... we're assuming that you might have 
other things that you want to do in that 
servlet BEFORE sending back the stream. You 
might, for example, need logic in the servlet 
that determine; which JAR file to send. Or 
you might be sending back bytes that you're 
creating right there on-the-fly. Imagine a 
system whe re yo u ta k e i n pu t para m ete rs from 
the user, and then use them to dynamically 
generate a sound that you send back. Sound 
that didn't previously ehist. In other words, 
sound that's not sitting on the server as a file 
somewhere. You just made it up, and now 
you're iendtrv^j it back tntfw r€£ponf& 

So you're right, perhaps our example of just 
sending back a JAR sitting on the server is 
a little contrived, but come on.,, use your 
imagination here and embellish it With all 
sorts of things you might add to make it worth 
being a servlet. Maybe it's something as 
simple as putting code in your servlet that — 
along with sending back the JAR — write? 
some info to a database about this particular 
user. Or maybe you have to check to see if he's 
even allowed to download this JAR, based on 
something you first read from the database. 
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PrintWriter and OutputStream 



YouVe got two choices for output: 
characters or bytes 



Thi< bjtisl plain old jiiV;i.in, CXCCpt <ht- Sti vklkc^ ,r- iiili-i f.u f 

givrs ytttl only fa ! <J sdMtBul tQ chutMc frum; St'rvletOuiputStrf',iiii 
for bytes, t>r a PrintWriter for character data. 



► PrintWriter 



PrintWriter writer - response.! 
. .-■ i .j^yj^Jjjf "£:ojiie text and HTML") t 
Lh;c it for: 

Priiilinjr text dam In a character stream. Allium^ you 
run Mill Wi ilc character data to mi Uutpul^tieam, ihis 
ib the stream that's designed to handle character d:u,i. 



► OutputStream 

Example 

ServletDutputSLieaiui out = response. 



getOntputStxieam ( ) 



out 



[atiyteflrray] ; 



Writing 



FVJs T»w PriirtWrrtcr actually "wra^i" the 
EevvletfiutfutStre** In wHer ™rdv the fVintWntor 

a reference to the SerYletOutyvtStirea™ and delegates tails 
to it TWe's just 0N£ outfit stream baelt to the client 
tut the PvintrWifce* "detwatet" the stream by adding 
Hi^er-le«l £haratter-f»-*ndly method* 



You MUST 
memorize 
these methods 

You have to know these for the 
exam. And it's tacky. Notice that to 
Writs to n Se/vfefOutputStraam 
you wrtteQ, but to write to a Print- 
Writer you... ptintinQt It's natural 
to assume that you write to a miter, 
but you don I if you already use 
fS^JO, then you'va been down 
this road. But if you hams% just 
remember: 

printing to a PrintWriter 

writeQ to an ServietOutputStream 

Make sum you remember that 
the method names for getting the 
stream or the writer both drop the 
first word in the returned type: 

ServietOutputStream 
response. yefOulputStreamO 

PrintWriter 
response gstWh'terO 



You need to recogmze WRONG 
method names like: 



\ 

\Slream(} 



tVioe are 
«0T«al! 
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request and response 



You can set response headers, 
you can add response headers 

And you can wondrr what ihr difference is. Bin think 
about ii far :i second, then do this cxeftiir, 



Match the method call 
with its behavior 



Draw 3 line from I Me HttpResponse tneHiod to the method's behav or 
We did the most obvious one for you 



regions e. set Header Cfoo", "bar"t t 



response .addHeader ("foo", "bar") f 



response. setlriLHeader ("foa", 42) t < 



Aods a new header and value to the response, or adds 
an additional value to an existing header 

A convenience method tnat replaces (fi9 value dl an existing 
header with this integer value, or adds a new header and 
valve to the response 

tf a header with this name is already in the response, the 
value is replaced with this value Otherwise, adds a new 
header and value to the response 



Pretty obvious when ytm set- them all toni-ther. 

Bui for the exam, you should bave them memorized so thai if 
next Tuesday the ply down the [mil asks, '"What V that response 
method that let* me add a value to an existing header?" you, 
can, Without the slijjhh-si pause. *ay "It's addHeader, and ill 
takt-s two Siting fur ilie name ami value." Just like iliat. 

Both set Head erf) anil ad d He ride r( J will add n beadei utul 
value to (lu- m|miiM' if the header (the first argument DO 
the mcthod)t3 noi ahead) in the response. The difference. 

In um'.'ii i-i .hi I .ulil Ii-'a ■ ii[i '.' li.-n ill.- hi'Mtli'i . iIk-h' Ii 
[hat cane: 

sell leader i, I overweitos llie existing value 
ar/</llead<T{) adds an additional value 

U ben you rail sert!intit' , iit'J'ype( > 'teK(/htinr , i, yon "re setting a 
header just as if you ^.w.:\: 

setHcader( u coment-type**, "tesL/himi . 

Sn what's the difference? No difference..., assumingJOU l\pf titf 
"ttmtrnt-ftfir" hi-<tih> imiYiilv. The KtHcaderfJ method wmi'i 
coroplara if you misspell i hi- beadei names ii juni thinks 
Miu'ri- adding .1 new kind of header. Bui something eh* will 
(ail hitrr. because now y<ui haven' I properly srl the content 
type of the response! 



Make itSfcefc't* * 

Mith h^ond Q uitea P u y locd 

Not one N*^**** 
had more than one «,fu* 



(The firtt 

id-bully Titfi-tBVJ Will fatm,, wrtK Ww njjkt <ti*.if.g 
»r4 PWrytlnmj, geti i tptdiil rddw t-*lvirt.l 
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request redirect 



Put sometimes you just don't want to 
deal with the response yourself.., 

Ymu i ;tn choose tb tuflVC iptttcthiog else handle die response fat 
iinir npgqial Y"U . .hi i-tibcr rftiim't the rtoqnfest to ;i complete!] 
HilTciTiM L'RL. or VOB cm ttispalrh the tfijuni in some nther 
eompnnent in yfjur web app [typically a.JSPj- 



Redirect 



CI Font types a URL into the 
browser bar... 



The request goes to 'he 
server/Container. 



The serv let decides that 
the request should go to a 
completely different URL. 



i ■ ' l— " 




The browser gets the response, sees 
the "30r status code, end looks for a 
"Location" header. 



The HTTP response has 
a status cade *3GI" and 
o "Location" header 

with c URL os the value. 



The servlet calls 
send Red irecT(a-3tnng) on 
the response end that's it. 
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request response 



© 



The browser makes a new request 
using The URL That was the value of 
the "Location" header in the previous 
response. The user might natice that 
the URL in the browser bar changed... 



There's nothing unique 
about the request, even 
though it happened to be 
triggered by a redirect. 



The server gets the thing 
at the requested UftL. 
Nothing special hene. 




The browser renders the 
new page, 
surprised!. 




The HTTP response is just 

like any other response. . . 

except it isn't coming 
f ram the ideation the 
client typed in. 




yau ore hem * 135 



serviet retf/recf 

Servlet redirect wakes the browser do the work 

A redirect let* the SPfviej ott the book oontpk-ivly. After deciding tliat ji ™o*f tin 
the work, the si-n li-i dimply cills die smffiitdinct() method; 

If (worksForMe) [ 

// handle the request 
] else | 

response. sendKe direct ( "http: / /www. areil 1 y . com") ; 



t 



Using relative URU in sendRedirectU 



Van CHXI use n rtiaihv URL as tin- <iijiLjim»m lo srtjctRi <lin < t|), in*iead of specifying 
the whole *%tip://wwvfc.i M thing; Relative URL* come in two flavors: w'tili 01 
without a sliirtiiig forward stash 



hnagiiii- 'he Winn i 

http: //www, wickedly smart .com/myApp/cool/bar.do 



When the rrc|licsl nun" in!" the Setvlet numcd "I>uiIk\ I c scrvlri tails ConUi" er d 

; <-,,Hfi f Hi,, j n , xA¥h rmtntlu* 1THI. kKb( «Ui MflT tlnn wi > ;l forward slaslr i omst s« 1rt^(, 



semdRffdirPctQ with arcLitivc URL linn docs NOTs 

sQndRedirect ("f oo/stuf f . html/) ; 



Mis? Ckmtfeincr builds dt* I "li El L'RL (it ru-cds thia foJlhc 'djHjatioiT fHTadL?r it v * ' ,^ ei j -t>*e +r<** 

puts in the HTTP response) relative to tin- original I i-tim-si l r »L' 



HI, 



http : //www . wickedly smart . com /my App/c^ol / 1 00/ stuf f . html 

Bui ir the ftrgtuD«lt to sendRedlrectQ BOBS rtari with .i forward ^ I ■ * h 1 1 " 
sendRedi r act (Vfoo/stuff .html") ; 



TV -Corxae d ifa^ki at the 
beginning mfcinj "meljtive -U the 
rwt *f this web Coniimcr' 1 . 
The Container build* the complete URL relative to the w*6 C<>m:>im*i it&eH. instead 
nf rtbtiyt to the original UR1. of da r r-rpn^t. S<* ili<- m-w URL will In-: 



http: //www. wickedlysmart .com/ foo/stuf E.htitd 



1 36 chapter 4 



request and response 



You can't do a 
sendftedireetl) 

Watch it! after writing to the 
response! 

probably obvious, UA Wi *e LAW 30 1 
we're just making sure. 
If you took up sendRedirecty in 
the API. youV see that it throws an 
tSlegalStateException if you try to invoke 
it after the response has already been | 
committed.' 

By tomffl*^ tfW «* a " *f anc 
response has been sent That just means 
the data has been Ousted to the stream. 
For prec^at purposes, it means you can t 
write to the response ant) then call 
sendRedirectQ! 

But some picky pressor wit! tell you tfraf 
technically, you coiXd wrrta loth* » 
without flushing, and then sendRediroct{) 
wouldn't cause an exception. BuKtwouid 
be a completely stupid thing to cto. so we 
WOf ,'t talk about it, (Except that w&;usr on... 

m yourservfet. for gosh saKes make a 
decision! Either handle the revest or do 
a sendRedirecty to have someone Bt* 
handle the request. 
(By the way. this idea that "onca its 
committed it's too late" also applies to 
seffin g headers, cookies, status codes, the 
content-type, ana so on...) 



siting, 

- ... * takes a S/rino f/,., , s - , , D , _ 
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request dispatch 

A request dispatch does the work 
on the server side 

Ami iktl\ the Inn ili/If-reftc* bctweseo ■ redirect ;ukI ;i n-qmM ili-.|>;ii«:li -tudirrrt 
ni;ikr-j> ttic tJfali do thr work while hqunl iii>futir/) rmtkc* something dsr on the 
sfTin' tin ihr work. So rrnicmbrr: redirect - fton/. request clinpatch = jfrcr/\ 
UV'Ll ~;iy more about reqttest dispatch in n Lilcr chapler, but these two pn^es 
shi>i iW give wli m «|tiii'k liitik al the highlights. 



Request Dispatch 



(|) User types a servlet's URL 
into the browser bar.. 



The request (joes 
(g) to the server/ 




(3) The servlet decides that 
the request should go to 
another part of the web 
iips (in th j :ase. a JSP) 



tp rr.e serve-/ another part of the v 

_ Container ^ opp (in this case, a J; 



The browser gets the response in the 
usual way, end renders it for the user. 
Since the browser iocation bar didn't 
chonge. the user does not know That 
the JSP generated the response. 





The sen/let calls 

Rtquesttiiflpatchctr view = 

request, get Request Dispatcher ['result . jap") ; 
view. forward (request, response) ; 

and the JSP takes over the response 



\ 5 [j ^odeHeturvS 
I J response I 



result.jsp 
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request response 



Redirect vs, Request Pispatcb 




When a servlet does a redirect, if s [ike 
■asking the el rent to calf someone else 
instead. In this case, the client is the 
browser, not the user. The browser makes 
the new call on the user's behalf, after the 
arigmalfy- requested senJet soys, "Sorry, 
cull this guy instead,,." 




When a serylet docs a request 
dispatch, i¥s like asking a 
co-worker to take over ^ 
working with a client. 
The £5-wcrker ends up 
responding to the client, 
hut the client deesn't 
core as Jcng os someone 
responds, 

The user never knows 
someone else took over, 
because the UfeL in the 
browser bar doesn't 
change. 




Request 
Dispatch 



The user sees the new URL in the browser 
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review of - Response 



Review: HttpServletResptwse 

ITS 



BULLET POINTS 

You use the Response ro send data bacli lo the diem 

The most common methods you'H call on the response obiect 
fare! 



Be careful— many developers assume the melhod isgatFrinrWriterf}, Put 
it's getWriter(). 

The getWrrter() method lets you da character I/O to write HTML (or 
something else) to (tie stream. 

You can also use the response to set headers, send errors, and add 
cookies 

In -hy ie«i work), you I. probably Use a JSP to send rnrjsl HTML 
responses, but you may stifl use a response stream to send binary data 
(like a JAR file, perhaps) tome client. 

j a binary stream is 




The setCon[entType< \ method toils me browser how to handle (he 
data coming in wish the response. Typical content types are ■'texUhtml" 



You don't have lo memoi ze ■; 



as MIME types). 



You can set response headers using addHeader() or setHeaderl}. 
The difference depends on whether the header is already part of the 
response. If it is. seiHeadenj) will replace the value, but addHeader will 
add an additional value to the existing response. If the header is not 
already pan of the response, then setHeaderf) and addHeatierfl behave 
in exactly the same way. 

If you don t want to respond to a request, you can redirect the request to a 
different URL. The browser lakes cara of Bending the new request to Bis 
URL you provide 

To redirect a request, call sendRediretl(aStnngURL) on the response 

You cannot ca I send Redirect!': a"er the response is committed' in other 
words, rf you've already wntten something to the stream, it's too late to do 
a redirect. 

A request red/red is different Irorn a request dispatch A request dispatch 
(covered more in another chapter) happens on the server while a redirect 
happens on the client A request dispatch hands the request to another 
component on the server, usually witoin the same web app. A request 
rectfrecf simply tells the brcwser to go a d liferent URL. 



Servlet Response interface 

(Java K.ser vlet ServletResponse) 



«interface» 
SwvletResfKinse 



^iSjfferSfoefl 

SSlCOJlfMlffywfJ > 
getOutputStnsm{} j 

s8*Cani#n<L«nglft(f 
■'/MANY more rmtlmds, 



HttpServfet Response interface 

(javsK servlet h|1p HI I ;pServl el Response) 
I 



nddHead&t) 
encodeURLf) 
s&\a£rror{) 



//MANY more rrvthotis 
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request response 



3 



How wouitl Bervlel code 1'rom a service meriiod lu.g.. doPostO i retrieve Lite 
value nl" the "User-Agent"' deader front the request? (Choose all that si|>j -K. 

O A, String userAgant = 

request. get Parameter ( "User -Agent" } ; 

□ |>. String userAgent = request. getHaader ( '-User-Agent" ) ; 

J < String userAgcnt = 

reques t . getReques tHeade r ( "Moz i 1 la " ) ■ ; 

□ 1). String us:erAgent - 

getServletContext () .getTnitParameter User-Agent" J ; 



Which HTTP methods art Used to iliow the client what d»e server \* receiving? 
(Choose i I (Hal apply 

□ A. GET 

□ H. I'UT 

□ [.. TRACK 

□ I). K I'71'T RN 

□ ] ■;. OPTIONS 



Which method of HttpSe rvietRe sponse is m&d to redirect an HTTP 
request to another I'RL;' 

□ A sendURLO 

□ B. redirectUHLO 

□ i.: redirectHttpO 

□ I >. sendBfidirectO 

□ V.. ge tReque s tE i spa t cher ( } 
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mock exam 



Which HTTP methods arr: NOT cnn&idm:d idetnp^lcatl [Cfeonsc .si I thai 
apply.} 

□ A GET 

□ r pus i 

□ C HliAU 

□ l.t. PUT 



Given req i- a HttpServletRequest, which grls » binary input sfreatB? 
(ChtKdc all ili.ii uppK-: 

□ A. Binary Input stream a - req.getlnputstreamO ; 

□ li SetvletlnputSt re-am s = req.getlnputstream{ ) ; 

□ CJ. Binary Input Stream s = req.getBinary5tream() ; 

□ 11 ServletlnputStream s = req. getBinary stream () ; 



How would yoti set a header named CONTENT-LENt ;TH" in the 
HttpServletResponse i>Iijt.<E? (GhcHjse all that apply, i 

□ A. respanse.se tHeade r ( CONTENT- LENGTH , ,, 1024 ") ; 

□ B. response . setHeader ("CONTENT-LENGTH 1 ' , "1024" } ; 

□ t: response, sets tatus (1024) ; 

□ I). re9ponse.setHeadet("CONTENT~LENerH'- ; 102 4) ; 



tjumsc ilu' servtei i-iuU- frogmeni that gem u binary stream Ibr writing an image 
or other binary typ< i" ■ I ■ ■ - HttpServletBesponse. 

□ \. j ava . io . Pr in tWr i ter out - response. ge tWr i t e r {) ; 

D B, ServletOutputS tr earn out - response .getQutpu t stream 0 ; 

□ V- java.io.PrintWriter out = 

new PrintWriter ( response . getWritar ( > ) . 

□ I). ServletOutputStream out - response . getBinaryStreaiti() ; 



142 chapter 4 



request = response 



Whic h mcilmds an- usrd by a *cnlci i<> handle form data I'mm a client? 
[Choose all ill at apply,) 

□ A. H ttpSe t-vlet.doHead() 

□ H HttpServlet.doPost (} 

□ Oh HttpServlet . doForm ( ) 

□ 11 ServletRequeat.doGet n 

□ li. ServletRequest.doPostO 



Which of thr following methods arr declared in HttpEervletRequest aa 
(ipprtHL-d to i» servletRecfuest, 1 (Cboow! .-ill thai apply.) 

□ A getMethodO 

□ G, getCookJ.es <) 

□ Di get Input Stream {J 

□ I. getParameterNaaflsj) 



How sIhulIJ sri'vlt'i developers handle the HttpServlet^ service (J 
nn'tlmd whi'Ji rMi iuliii'.: HttpServlet' 'Choose all ihal apply.) 

^ A. They should override the service {) method in most cases. 

J 11, They should tall the service { ! null i '"I hi 'ill dcKJetQ h m doFost-O 

□ C, Thev should tall tin- serviced method (mm the initO mjechdd, 

□ 11. Thty ihquld cM rridr at Icaft ottc do)CXX() method (siuh at 

do Post f j i, 
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mock answers 



3 



How would servlel code Irom u service niL'thixt Ic.j*.- doPost() I U'li'leve tin 1 

value i>f the "Uaer-A^eni" headci from the request? (Ghpcwc nil that apply,) 

O A. String user Agent = 

request .getParameter ("User -Agent"} : 

13 B. String userAgent ** request. getHeader ( "User-Agent" ) ; 

□ C, String user Agent = 

request. getEequestHeacier ( h, Moz ilia"! , 

LI D. String userAgent = 

getServletContext () . ge t I nitParameter (" User -Agent") ; 



-Opto* B tyj 
parameter 



\\ hit h HIM' methods are um-J tu show the < tit-m what the server i>- receiving? inr ' 
^5 [Ghuosc all 4 h;t! apply- J 

□ A. GET 

□ 8, PUT 

a c i rack ^-n,- -ethed n i^aiiy u«a U 

□ D . RETURN to-odoleihootoi^ not k<r pvWutto^- 

□ e. omoNs 



^ Which nn-ilnxl h 1 1 " HttpServletResponse i- u-^d to redirccl an HTTP 
J iasquifsi to swthM Ufcl? 

□ A. sendURLO 

□ B. redirectUKL(] 

Li C. redireatHttp {) _ . r r. 

W D. aendRedirectO „etl»d* the »( ^ 

□ E. getRequestDispatcher ( } r^sb in HUf ServlftRtipshM 
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request response 



Whirl: HTTP rn.-ttuxls air NOT rmisidcn-d idcmpolrnt? all thai (flr \, idM***^ 

apply.} rc^wtst 1 ' 

3- A ^d«ic*. POST *r^ to^7 

□ c. mi > X I. «U*h* ^ 



I liven reqi* a HttpServietPequest, which get* a binary input itream? (flPW 
(Cht)0«C all Ilia I apply,; 

□ A, Binary-Inputs tream s - req.getlnputStreanW ) : ^ 
^ B, servletrnputstream m = req.getlnputstreamO ; 'fj^^E* ^ e 

□ C. Binary Inputs tr earn s = req.getBinaryStreaHLU ; ^^J- return '"feyf* 

□ D ServletlnputStream . = req getBinaryStreamf) ; 



C*PP 



How would ynu sel a header named 'CONTENT-LEW ;TH" in thr 
HttpServletResponse (jbjeot? (Choose all thai apply 

□ A. response . aetHeadet (CONTENT-LENGTE, '1024") , tCrrett 
Kf B , re sponse . se tHeader ( "CONTENT- LENGTH " , " 1 024 " ) ; set ^HTTP H« d P 

□ C. response, setStatus (1024) ; ^^^t^^h^ 
G D , response . setfleader ( "CONTENT-LENGTH" ,1024) ; ^jl^Jnd the oW the 



Cboosf ihe servlei I'lxte fragment that) gpt* a binary strewn (or writing an image 
or other binary tvpc to the HttpServIetPesponse. 

—J A. java . io. PrintWriter out - response . getWr iter {) ; beMust it uses a 

0Tb. ServletOutputStreara out - response. getOutputStreara () ; £ha*-atter-<rte*ted 

□ C. java.io.PrintWritor out = rVmtWrittJr 

new PrintWriter. (response . getWriter ( )} ; 

□ D. ServletOutputStreain out - response .getBinary Stream <) ; 
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mock answers 



Which tftfthocU arc usrd Iry a Jctvfcl Id handlr ir»rm daw from n clicm? 
O I Cfu.nw all thiii apply 

□ \. HttpSeL-vlet.dtiHead() 
El R. HttpServlet . doPos t ( ) 

□ C, HttpServlet . doForni ( ) f ? »t Wtfl«9 

□ B, ServletRequegt.dQPostO e *,ft 



Whkh of the fallowing methods W*r dcthin-d in HttpServletRequest .1-. tftPP 

opumscd Id in ServletRequest, 1 (Chbtiw nit thai apply.- 
If Vg.tH.thod,. -^M^C* 

3 1 . getCookiesO HTTP w^wi 

_J I ). got Input Stream ( ) 
□ \ .. gatParame terName s ( } 



Htiw should efcrvlel developers handle the HttpServlet -; service, ) ( flPP 

10 nil 1 ihod when exttrnd in jj HttpServlet.' (Choose nil dial apply.) 

^ A. They should override ilic service () method in mosl cast's. 

□ fl. They should 1. .'I 1:1 serviced :m Mi' "1 h mn do&et (J -u doPoat 0 

C, They should call die service () method from die lnitO im-llmd. 

D. They should override at Icasi otic doXXXO method (such iis 

r.i. 

developers 4:yp»talh/ +«ui 
the d^etO, a-d itfvtf.) 

■MCthodf 
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attributes and listeners 



mm 



Being a Web App 




You must understand 
how the pieces of the web opp 
interact, and you must respect 
the threads. If you store well 
on thii chapter's mock exam, 
I will Jet you live, 



No Servlet Stands alone. In today s modem web app many 
components work together to accomplish a goal You have modato, controllers 
and views. You have parameters and attributes. You have helper classes. 
But how do you lie 1 he pieces together? How do you let components share 
information? How do you hide information? How do you make information thread- 

j. be sure ; 

when you go through l 




IhJs Is a new chapter 
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offical Sun exam objectives 



The Web Container Model 



Coverage Notes: 



3.1 For the servlet and ServletContext initialization 
parameters: write servlet code to access 
initialization parameters, and create 
deployment descriptor elements for declaring 
initialization parameters. 

3.2 For the fundamental servlet attribute scopes 
(request, session, and context): write servlet 
code to add, retrieve, and remove attributes; 
given a usage scenario, identify the proper 
scope for an attrtbute; and identify multi- 
threading issues associated with each scope. 



Describe the elements of the Web container , 
request processing modef: Filter. Fitter chain. 
Request and response wrappers, snd Web 
resource < 



Ail oj the objectives in this .iff Unit arc towed 
completely in this chapter, with the exception of 
3.3, which is torered in the FiittK ehnptti. 

Must a f \rh»t\ hi this ifitijttn wilt com* up in 
itthtr pafti <>J thr lunik, hut if ytut'tr taking tht 
rxfiin, THIS m the (ha ji> Iff when rcr rxprcl you 
(tan and memorise the objective topics. 



3.4 Describe the Web container lifecyde event 

mcdol for roquOE-iS. SCEeiOns, and UJOb 

applications: create and configure listener 
classes for each scope iife cycie: create and 
configure scope attribute listener classes: and 
given a scenario, identify the proper attribute 
listener to use. 



3.5 Describe the RequestDispatcher mechanism; 
wnte servlet code to create a request dispatcher; 
write servlet code to forward or include the target 
resource; and identify the additional request- 
scoped attributes provided by the container to the 
target resource. 
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attributes and listeners 



I vwtnT my email address to 
show up on the beer web page my 
servlet makes,., but I think my email 
is gon™ change and I don't want 
to have to recompile my servlet 
code just to changa it.,, 




Kim wants to configure his email 
address in the PR not bard-code it 
inside the servlet cfass 

Here's *fhal Kim docs not waal in tu> v.'rvtcL: 

Pnntwriter put = response, getWriter.O$ 
out .println ("blocperSwickwilysiiiart, com") 



Ht 'd iium'Li nuhrr put his email address in 
the tfytttgwumi tk&tfytot (webjun) file) so thai 
*vhcn he deploy? hi? vcb -'^pp, hi? scrvicl con 
Sortiefravr' "trad" liia email address Lrom ihe 
I )1 1. J I j - 1 i u ,i ■,. Eti ■ 'll'l lull i- l<i haul i in lc 
hi) S'ddrtss in thf st-rvlfi < la-s, ami i<i i hangr - 
bis rmail In - rhodifiei [inly I In- weli.xrnl file, 
Uiitfmtt fitirirti> U tMteh his snrfrt tmiftt (tide. 
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j'ro'f parameters 

\mi Parameters to the rescue 

YduYc ahvady strt'H the r< - c|iiH->it (iiiidinf \en thai can 

c ■ cfvej in a d(t(Jrii. i 01 hI^Hum;:, Inn sccvtet! i on 

have tfikialfflatifm paramL*u?i'K :ii wML 



In the DD (web.xml) file: 

«setviet . „ar3^»» e 3 

ocivJc-t-nja.-.- •. unTftfltS' .-.•:-t-namo> Y 0 " ^' ge c \ Ov*t ""^ e 

<8e*viet-dlaBs>TeE:t I : iiu3< /aerviet-i: : oara«"-"*'* ,t- T\. , ^Ir-b* 

<init-paraiu> e Lt»eiA h PP 

<pa r am- fi ame> adnii nEmai 1</ p a ram.- nain.e> 

<par am- va Xue > 1 i kewee ar&@ wi ckedlysmar t - cqhk /p a ram- val ue> 
</init-param> 

* - ./servl tr- 



ill the aervlet code: 

it.printLri fgetServletConfigO . getlnit Parameter padminEinail" J , 
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attributes antf listeners 



You can't use servlet mil parameters 
until the servlet is initialized 

Ynu utready iaw tltai yjetur M-rvlei inherits gctSfervlrtCoofigQ, 
mi yi m i ,111 call dull from iiiiv method in yptir scrvfol hj gel a 
rcftrrcnci' t<i a SktrvJetGonfig; Once you have a ServlotCottfig 
i efbrt93.ee, you can call getlnill j arameter()i But remember, 
you can't ml! it from taut ffiastrtutnr!'Y\YM\ early in (In- 

M-rvlffs lift-... it won't Unvr its full iwtvIctBei* until the 
Container calls initQ, 



7c* 



'5 



'is*... 



constructor 



* w to ^ inft(Servlet£oriri9) 



de£troy() 




Way back in the last chapter, you laid it takes 
TWO things for the servlet to become a card-carrying, 
fez-wearing servlet. You mentioned both ServletConfig 
and 



Wlien tlie Container 
initializes a servlet, 
H makes a unigwe 



Tke Container "reads" 
the servlet inii 
parameters from the 
DD and gives them to 
die ServletConfig, then 




OK, yes, we'll lw?k at the Ser vletCoftrexf in ju*t a few 
pages. For now, we care only about ServletConfig, because 
that's whew you get your servlet In ft parameters. 

n : 

>t^ Wait a minute! In the last chapter you said that 
we could override the initO method, and nobody said a 
word about the ServletConfig argument! 



X\ Wo didn't mention that the fnit[) method takes a 
ServletConfjg because the &ne you override doesn't take 
one. Your superclass includes two versions of ir>it{), one 
that takes a ServletConfig and a convenience version that's 
a no -a rg, The inh£fi(pd InlrtServtetConfiffJ method ciSls the 
n o- a rg in it( ) method, so the on ly one you n eed to overri de 
istheno-arg version. 

There's no law that stops ytsu from overriding the one 
that takes a ServletConfig, but if you DO, then you better 
call super.init(ServletConfig)l But there's really WO reason 
why you need to override the init(ServletConfig) method, 
since you can always set your ServletConfig by calling your 
inherited getServletConfigQ method. 



you ate here » 1 51 



servlet tnit parameters 



The servlet init parameters are read only ONCE 
when the Container initializes the servlet 

When the Container rnakri ,i servtet, it reads tlie DD and estate! thr 
iiamcAiilii< j [niirM t<ir ihr Scn^etGonflg; The Gontaihcx ntvicr read* thr inii 
paranu'UTs again! Onie £hr parameters ,m in iln- SiTvli'iCItmlig, iht»y won'i \n- 
read again until /unless Jftju redeploy the servlel. 77rf'n/. nifju/ MrtA 



Container reads the Deployment Descriptor 
for this servlet, including the servlet init 
parameters (<inir-panam>). 



read — 



tb.xml 



Container creates a new ServletConfiej' 
instance far this servlet. 




new 



3 

5ervletCor.fi g 



{§) Container creates a name/value pair cf 
for eoch servlet init parameter. 
Assume vte have only one 



new 

Icenlairair 

* ■ ^ ** new 



String 

2) 



Wt Parameter 



Corttoirte^ gives the ServletCenfig references 
to the name/value init parameters. 




ServletConfig f^ojuej 
String 



fg*J Container creates a new instance of the 
servlet class. 




new 



o 

instance of 
MyServlct.elttss 



Container calls the servlet's init() method, 
passing in the reference to the ServletConfiej. 




Cor fig 

I Strihj 



Container 




o 

instunce of 
MyServiet. class 
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Since the Container 1 
reads the servfet init 
parameters only once, you st!U 
can't chcuwj£ your email address 
during the life of "the servJet 
So this is a dumb 
solution. 




Q- So, urn . where i that 
"redeploy" button an Tamcat? 

A: 

Kim i <j ii mnn li i<?fi? ijjm * 
one-button, really simple admin tool 
for deployment and redeployment 
(although there a an admin tool that 
ships with Tomcat). But think about 
it — what's the worst you have to do to 
change the servlet'sinit parameters? 
You makes quick change to the web. 
xml file, shut down Tomcat {bin/ 
shutdowns hi, then restart Tomcat 
tbin/startup.sh). On restart, Tomcat 
looks in its webappi directory, and 
deploys everyihing it find* ihere. 




Sure it's easy to tell Tomcat 

to shutdown and startup, but 
wh at ,i hci bit thr uirpb app-i thii t n ip 

running? They oil have to go down! 



Technically, yes. Taking your 
web appj down so that you can 
redeploy one servlet is a little harsh, 
especially if you have a lo( of traffic 
on your web site. But that's why 
mo st of the product ion -quality Web 
Containers let you do a hot redeploy. 
which means that you don't have to 
res Tart your server or take any Other 
web apps down. In fact. Tomcat cfoes 
Include a manager tool that will to 
you deploy, undeploy, and redeploy 
entire web apps. wiihoui restarting 



Tomcat, In a production environment, 
that's what you'd u$e. But for testing, 
it's easier to just restart Tomcat. Info 
on ihe management tool is at; 

httpJffakarta.Qpache.orq/tomcaV 
fOmcor-^.W-rfoc/manooer-hoivfQ.rifm/ 

Eut in the real world, even a fiat 
redeploy is a Big Deal, and taking 
even a single app down just because 
the init parameter value changed 
can be a bad Idea. If the values of 
your init parameters are going to 
change frequently, you're better off 
having your servlet methods get the 
values from a file or database, bur 
this approach will mean a lot more 
overhead each time your servlet code 
runs, instead of only ante during 
initialization, 
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using ServtetCtmfig 



Testing yourServletConfig 

Si'rvlctCnnfig's main yyb is t«i give you inii parameters. It can also givc- 
you a ServJctContcxt, hul wo 11 usually get a context in a dillcrent way, 
and the eetServletNaiii*!) method is rw-etv useful. 



javax.servletServiefCnnflg 



ServfalConfig 



In the DD (web.xml) file: 

<?xml version*"" 1.0" «ncodlng~" ISO-8859-1" ?> 

<web-app xml ns= w http ; / / java . .sun . etWxinl/ rw/j 2 be?" 

xnlns : xai="httpi //www. w3 . org/SGOl/XMLScheffta-instance 1 * 
xsi : schemaLocat ion - " fit kpi f I j ava . sun * com/xml/ns/ j 2ee/web-app_2_4 .xsd" /(flost ?«^ e 
vers ion="2 . -i r > ^ wtfcW 

< servlet -name >BeerPa rainiest s < I a erv le t -name > 

<-servlet- classroom . example . Test InitParams</servlet-c lass > 

<ini t— pa.ram> 

<pararo - name --a dmi rtEma i 1 ■-' 7 pa ram-name> 

■-■parani-vaHie>iL)tewcr;are@wdckGdlVB!nart,caiti</ , par am- va 1 Ue > 
</init-param> 
<iuit-par^iD> 

tpararu- name >ma i nEma i 1 < /par am-name > 

<pa tam-value>bLc-aper@wl^ksdlyiiiiiatL .cum-- /pa rajn-ualue 

< / itil L-paraJn> 
■c/ servletJ 

<se nrl b t -mappings 

<servlet - name > Beer/Pa r amTest s < / s erv let-name > 

< u r 1 -pat t er n > /Tea te r . do-< / ur 1 -pat tern> 
</ scrvlot -mapping> 

</web-app> 



In a servlet class; 

package com. example; 
import ^avax.servlett"; 
import javax.servlet.http. *; 
lmpo r t ] ava . i c- . * ; 

pi-i—iic els?— T-^tTr.i tPsr~ni.^ ^xt-^nd^ Sittp5si"vi5t I 

public void doGet (HttpServletRequest request, HttpServletResponse response) 

throws IOException, Serviet.EK crept ion { 

response. aetContentType ("text /html") ; 
PrlntiWriter out = response. qenWr i tier () ; 
out .println ("test init parameters-ebr^) / 

java.utll .EnumetaUnn e = getsejruletcanfig () .getrnitPatametetNames ( ) ; 
while (e . hasMoreElements 0 i I 

out .println. ( "Vbrspar-im name = " 4 e .nextElenieikt 0 * , Vbr:>'*}} 

I 

uut .println ("main eaiail iu " -t- getServletConflg () . get 1 nit Parameter ("maittEEnatl"'} ) ; 
out .print In r<br>"| t 

. out .prlntln ( w a<runin email is " + getServletConfiq 0 .ijetlru ^Parameter ("admlinBEiail "M i 
| ' 
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Uh-oh. I iuit 



realized that in my real epp 
I'm using JSP to render the 
fja^e. Sa can a JSP "see" a 
sen/let's init parameters" 




How can a JSP get servlet 



A .Vm'fciConfig is lor SfTPfti configuration (it doesn't say 
J.S'/t.'onligi. So ii' you want wtAfr parts, of your application 
tq iim' flie same info you [>ut in the jervH 1 * Itiil 

parameters In the Dll. you need iqmethiog uum-. 



What about the way we did ft with the beer 
app? We passed the model info to the JSP 
using a request attribute. .. 



// Inside the doPost 0 methyl ^^*" 
String color = request .getParameter ("c-olor") t 



BecrExpert be = new Be&rExpo i t ( } ; V ji 

List result - be. getBrands {color) ; C ^ iht Wia{ ed . . 

request. setAttribute {"styles'*, result) ; "™ * *etd ^ jjg TO 

We do ii t li is wav. Tin* request object lets you set 
ottn&uta (think of them ai <i name/value pair where the 
'.ill- -..if. I..- .jh> oUjrri iliat any other««vfct «f thai 
f(f. L is tine request can use. That mean* any scrvttsi or JSP to 
Which the request is forwarded usinira Ri-ynmiDispithfia: 
We'll lookal EteqtiMtDispatcher in detail at I he end of 
this chapter, but lor now bill we care about is getting ihe 
dan in (bis ease the entail addressi In the pier es of (he 
wt-h ;iiif) l ti. ,l elih I ii. i-atltri llun jllM one snvkt. 
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Setting a request at tribute 
works... but only for the JSP to 
which you forwarded the request 

Wiih the beet fcpp, it made s<*iise to store the iiukM bib for 
the client's request in the rrqiifst «*>rf, because the next step 
was to Jbiward the request Lo Hit' JSP responsible for creating 
tin- view. Since ihatJSH nefded tht* model data and die data 

was relevant r il\ that particular r*>f|iiest. everyihiug was 

fine; 

But lliat doe 511*1 help 111 With Mpe email nildit'BS, became wr 
niit;lti need In u*f it fi-cim .ill <ivrr ihe applicaiirtn! 1 hjsfi ^ a 
way lo have it scrvlcl read the iiiit parameters and then slurc 
them in a place oilier parts «1 the app could im\ but then 
we'd have in know u?/ju7; scrvlet would always run lirsi when 
the app is deployed, and any chants to the web app cmilil 
break the wllol. thing Nip, lhal Wdti'l do eillicr. 

I wonder if 

there's something like 

init parameters for the 
application? 




But I really want ALL the ports 
of my web opp to have access to the 
email address. With mit parameters, 
I hove to configure them in the DD for every 
servlet. and Tben hoveoll the servlets make 
them ova i lobf e f o r t he JSPs . Howboring 
is that? Not maintainable either, I 
need something more global. 
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C ontext mrt parameters to the mm 

CssUxt inii parameters work just like km parameter*, (steep* 
ruriicM pMrvunrKTi are available to ill*- entire webapf*, not just 
a single aervlei. So thai means any servlei and JSP in ilie app 

autiwiaticalb has access irt ihr nuilcXI inil parimieirrs. SO WC don*t 
have lei worry aljout coniijjurin^ the I >D [of every scri-vlct, and when 
the value changes, you only have to change il one place! 

In the DD (web.xml) file: wfe 

<servlet> 

<servlet-name>Beeri'araniTest s-t/EervIet-name- 
<£jetvlet-jla^c>l'e5tli Lltpiramiv / serv 1 at -elaa s > 
</3ervlet> 



<aon tex t -par am> 

<par am- riame>adiii±nEirLai 1 </par ajei-name> 
~7l <par am- va lue>c lientheade rro r@ wickedly smart . c om< /pa ram- val ue> 
/ < /con text -par am> 



In the servlet code: 



OR: 



tetv] etCantext context ■ get.Servl 
3 ut tprintLn {context .getlnirParame 



:ez <"adminEina.il*) ) 



Were *e broke out the Code Into TWO steps- 
Jtfctonj the ServletConieitt re-ferei^e, And ullinA 
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context vs. serv/er init parameters 



Remember the difference between servlet init 
parameters and c ontext init parameters 

Hriv'i .1 n-\ 'ww "\ ihr kf) iliUVn-in i-i Ix-iwreri nw/^i/ init [uiramt-lrrs ;«irl 
mil parameters. Pay nprcial ,inrininn in iht- facl llntt lhr> r "rc both rrfcrmd to 
(Wi7 purameleis, even thstUgb nnly tmi/r/ iiiit paraniolcrs have ihr word "init" in 
thf DL> canliguratkm. 



Context init parameters 



Servlet init parameters 



Descriptor 



Within the ^web-app^elemeni bul WOT 
within a specific <servtet> element 

web-app ,> 
context- f 13 ram > 
< par am-n ame> f 00 / pa ram- name > 
<param-valui?>ba.r</parajn-value> 
< / context- pa ram:' 



tiff including 



declare 



'i-nn — ■ 



. DP W 6*fej 
for scrilel «*t fira-e^rs 



Within Ihe <;sen/let> aletnent for each 
specific servlei 

servlet 

<servler-name> 

Beer Pa ramies ts 
< / eervlet - n ame > 
<«e rv lct-c lass > 

Test I rdtfaLainfi 

<init-parfiiv 

<patdtn-rjaiiia>£i>o< /param-ridm*> 
<pa ram- value>bar < / p a r am- va lue> 

</init-param:> 

<J — other stuff -- ■ 
. aervlet 



Soviet Cods 

ger.SsrvlFTContext u .get JnitPacwreter C too" » ; getServletGonBg{J , gst In: fcPajsmBter i *foo* j ; 

\i't -tin sjme Hidhod name' 



Avaffabffjfry 



of this web app 



To Only thre servlet for n 
coj>ftgured. 



: la make it more 
I ii in an anribuie ) 
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SwvkiConfiq is om per servlet 
SzrvkiContext is one per web app 

Thr'i'!''-> only tuit* ServlctGontoO IV u - ;m eaiirc web app, and all the 
part* of lln- "i-h slim'! 1 it, Hill r;n |i sn'vli'i hi llii L ,i[>ji li.ci ih <i\\ii 
ServlctCunfig. The Container makes n IServletContext when n web 
app Ls deployed, and muke^ the context available to each Seivlel and 
JSP [which become* a servfet] in the web app, 




Strict B m*d* 



Watch it! 



Don't confuse 

parameters with 
ServlBtCpnte«t 
parameters! 



you roafly have to fc»P f '* s !™L 
Hras both SenAetConfig and ServlelContext 

rtavi itf P3rame to^ bom mm m 

sarne getter ^frtod-ge^n^P^^e^ 
HUT. you a/so nave to Know that context 
mil patera ^ Ml wrto ^'^f^ 

\ mt peters urn <init- P ar^ fra* *J 
jrrtVfctoa' <seA//oI> cteetaraftorrs fc> 0W DO- 



Web app initialization: 

■ Ccntai tier reads (tie DP and 
creates a name/value String pair 
for each <oon[ext-p3ram> 

■ Container creases a new instance 
of ServletContext. 

■ Container gives the 
SefvlelConlext a reference to 
each name/value pair of trie 
context mil parameters. 

■ Every servlel and JSP deployed 
as parr of a single web app 
has access to ihat same 
ServfetConiext 



if ihe app is 




-- — ft* • " 

-it distributed, there's 
VYMLtri f L J one ServletContext 
per JVM! 

)f your application is distributed 

mi iV. __ „ j _ t j 



f across 



, -j n L,r~. L'ucruYjr ,i i j LWSlE/eCf 

environment), your web app really COULD 
have mare than one ServlotContexi A 
ServletContext is one per app, but only if 
the app is fa a single JVM! 



*w is inn smgse jvm 

tn a distributed environment, you'll have 
SenvietContext per JVM Now. chance: 
this won't create problems, but if you have 
distributed web app. you better consider th 
consequence of having different contexts 



one 
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>C, What's with the inconsistent naming stheme! 
How come the DD elements are <context-param> arid 
virtdfparam.-- hut in the ser vtet code, BOTH use the 
getlnitParametertt method? 

A- 

£\ ' They d id n't ask u s to heEp them come u p w ith th e 
names. |f they had, of ctmrse, we'd have said it should he 
getfrrrfParameterO and getCoMfexrParameterO, to match 
the XML elements in the DD.Or, they could have Used 
different XMI elements— perhaps < servlet init -pjdraiTi:.- 
and ^context init-param>, But no, that would have sucked 
all the fun out of trying to keep them straight. 

Oi 

Why would I ov^r use ^init-param> anyway? 
Wouldn't I always want to use <conteHt-param> so 
that oth e r pa rts of my a pp t ould reuse the values a nd 

I won't ha ve t o d u p! ic ate KM L cod e for every s s rv let 
declaration? 

A- 

* It All depends on which part of your app is 
■.upposed to see the value. Your application logic might 
require you to use a value that you want to restrict to 
only an individual servlet. But typically, developers fmd 
app wide context init parameters a lot more helpful than 
servlet-specific servlet init parameters, Perhaps the most 
common use of a context parameter is storing database 
lookup names. You'd want ail parts ol youi appto have 
access to Hit; cc*nect nsm*,*rid ^li^n ii changes, yuu 
want to change it in only one place. 



0 : 

What happens if I give a context Init parameter 
the lame name as a servlet init parameter in the same 
web app? 



A 



The molecular-sized black hole miraculously 
created in a research facility in New Jersey will slip from its 
containment field, plummet to the earth's core, and destroy 
the planet. 



Or maybe nothing, because there's no name space conflict 
Eince you get the parameters through two differenl objects 
(ServletConlext or ServletConfig). 



0 : 

\/ If you modify the XML to change the value of an 
init parameter [either servlet or context), when does the 
servlet or the rest of the web app see the change? 

A* 

ONLY when the web app is redeployed. 
Remember — we talked about this before — the servlet is 
initialized only once, at the beginning of its life, and that's 
When it's given its ServletConfig and ServMConlent, The 
Container reads the values from the DD when it creates 
those two objects, and sets the values. 



0- 

^f^, Can't I get around this by setting the values at 
runtime? Surely there's an API that 'll let me change 
these Values dynamically.., 

A: 

j\ No, there's not. Look in Servlet Context of 
ServletConfig and you'll find a getter (getlnitParameterO), 
but you won't find a setter. There's no getlnitPaxameterti. 



That's lame. 



These are toll parameters , inn from the Latin word 
initialization. If you think of th em p urel y a s dtphy- tim e 
constants, you'll have the right perspective. In fact, that's 
so important we're going to say it again in a bolder way; 

Think of init parameters as 
deploy-tlme constants! 

You can get them at runtime, 
but you can't set them. There's 
no setlnitParameterQ. 
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feisc 




Code Magnets 



Rearrange the enagtusts to form a DO that declarer a 
parameter that matches the servlet code; 

getServletConteKtif] .getIn::tFaJ:aJT!e^:erC^XJ , ') ; 

You won't use all of the magnets! 

(Note: when you see «;web-app ... >, remember thai 
this is ojf short- cut to save space on the page. You 
■can't deploy a web.xml file unless the <web-app> 
tag has all the attributes it needs.) 



com. 





If vou see ft* parameter 1 ' without 
Knowing if it ***** wrvirfor 
Imt parameter, assume servJet. 

£££e»r or a cm** W P****« 
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ths SefvferCQfirejf? 



So what else can you do with 
your ServlefContext? 

A SeirvtrtGoiitejci is ^,]^P ot scrvltrt connectiqn 

M lnnh 1 1 «' t'lMUiiini.T nrul llir ullu'r p;irts of the 
vvrbupp. Here are seme of Liu* Srrvie tCunU-xl 
methods. We juii ihr.* adet yan shi.mld Juidw for 
tin- cxLini in hiilcl. 




info abw.t tJ, e 



£yste*.a-i 



«mteriac»» 
Servtet 'Context 



gelhhParBmateTifStingi 
gefJrjrtPjrsme'erMNjTwfJ 

retncvtA Hiibtiit(Stfing) 

getResourcsAs9lream(Stiring) 

I'noi'.^^incr: 
.'/ mem mSfhoda 



Jttmbuki in a -few pJ9es 



We'll 

the c^yt** 



javax.servlet.ServletCoritexl 
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You car* get a ServletCortiext lr* iw- 
different ways- 

A code 
StyvtttCootaM for that sertfet So don f be footed If V™ 

oji rfie exam (naf says' 

^^□^0 ,^^^t ( ) .^t^-^H 

Not orty IS tfw< fefl* " ^ f * & "** 

getSarvtelCofitexffJ nwtfwd but don t be 
eofe usk *e SefVtelC&nffg to get ite cental 

B U tt •» II MM ft* *^^^^SS£ 
togsfaj-' 



O: 

Ho w do al I the pa rts of a web ap p g et a c«» to 
their nwn ServletContexl' 

£j* For servleti, yon already k now ; e all you r in herited 
getServletContextO method. 

For JSPi it's a litile different — JSPs have something called 
'implicit objects", and ServletContext is one of them. 
Van' 1 1 see exactly how a JSP uses a ServletContext when 
we get to the JSP chapters. 

O: 

So you get built-in logging through your 
context? That sounds VERY helpfi.il' 



xi Urn, no, Not unfess you have a really small, simple 
web a pp. There are much better way i to do Jogging. The 
most popular, robust logging mechanism is Log4j;you 
can find it on the Apache site at: 

h t Cp . 



Ynii can also U*e the lugging API from java utfl logging, 
added to J2SE in version 1 .4. 

I [ s fine to use the ServletConteKt log(} method for simple 
experiments, but in a real production environment, you 
will almost certainly want to choose something else. 
There's a good reference on web app logging with and 
without Log4j m the Java Serv/er & JSP Cookbook from 
O'Reilly. 

Logging is not part of the exam objectives, but it's 
important. Fortunately, you'll find the APIs easy to use. 
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Hate to- spoil your 
ServletContast poi"ty. but, urn, 
those init parameters can't be 
anything except STRINGS! Thafa itl 
What if T want to initialize my epp 
with □ database OataSource that ail 
the servlets can use? 




What if you want an 



database PataSource? 

Conlrxl parameters can't lie anything except 
Strings. After all, you patfj yery well stuil" B*£ 
object inio iin XMI. I ■ 1 1 1<: iynv nt deseripior. 
(Actually, you mtti represent a icralized ohje< I 
in XMI„ bill there 4 ! no facility fur iim in the 
•">•-•• !■•! -i- i.mI.i-... mw\tv in ill*- future,} 

U hat il' yuu really want all the part* of 
your web app to have access in a shared 
database connection? You can certainly put 
(In- DataSource lookup name in a rontest 

tail paramrln', itrnl that's probably llif WCttl 
roinniou use of context parameters today 

Hin i fit ii wftd dWy iAr wont of turning 
the String parameter into an actual 
HutaSource reference tlun .ill path nl' the 
web app can share? 

YqU can't really put that code in a servkt, 
because which tervlet would yon choose to be 
"The Otic To Lookup *Fh? DsisSourc-! 
Stow rt Tn An Attribute? Do you fvaHy waft to 

tl) to Lmaranter thai our wrvlcl in particular 
will always run first? Think ftbo/Ut it. 

FLEX YOUR MIND 

How could you solve this problem? 

How could you initialize a web app with an 
object? Assume that you need the String 
content in it parameter in order to create Hi at 
abject (think about the database example). 
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What she really wants is a listener. 

She wants u> listen fin-;) context iniiialiftition eVen£, 

80 thai she cilia pel the context in it purameKTs and 
ru it some code before the rest of the app can 
sen'ict? o ffient. 

She needs something that can he siltinR there, waiting 
to he notified thai the :ipp u. stLirtisiu; up. 

Ijul which part uf the app could do die work!* V 'U 
do0*1 WaOl W pii k B ItdrvJlH — that's not it servers jolh 

I I "( no problem in a plain old ■standidcmejavii 

ttjpp, In -I'ciiLHi- j-ou'vl- %L,t muiitij! lint with 11 iti-nh i, 

what < l< ■ you do? 

You need something that, Not n iervtct orjSH but some 
other kind of .Java object whose sole purpose; in lid- 
is to initialize the app land possibly to unmilialize it 

too, cleaning up nesource* when ii teams of the Bpp*s 

drilling... i. 
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context Jfsferrers 



She wants a ServletCoMtextlisteMer 

Wf I'iici iiiiikc ;i geparswe t-lii&s.. not j tervlet itr jHp, that can 
litm-n Tor the two ksy evt-w'f in a ServlrtGontexfj lift 
reiitialization creationj and tlesiriLrikm. Thin my-i rat ^ c1;»ss 
iin|4r[iKMilH j;n\tx.sm-lt-l,Scr\ lclCni]lexlLi>;U'iHT. 

We need a separate object that can: 

■ Get notified when the context is initialized (app is being 



Gel ttw context init parameters from the ServletContexi. 

Use the inrt parameter lookup name to mate a database 
connecDon 

Store the database connection as an attribute, so that all 
parts of tie web app can access it. 




Gel notified when the context is destroyed {Ihe app is 



Ciose the database connection. 



A ServletContextListener class: ^ t™he+i l*fc»er 

ii sir-fit >i»plew(r't 

import javax.^rvlel,'; ^^^^0^, / 

public -lass HyEsrvla1.-QnL4JXl.LLse.GHec impUiriBtiLs SaEvletContcxtListener I 

public void contextlnitlalized (ServletcJontextEvent evert) j 
//code to initialise the database connection 

//and store it aa a context attribute Tites^ it * 

public void contoxtEostxoyadlSer-vleto.mLexLEvanL event) I ^"^tBv^l 
//code to close the database connection 
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FLEX YOUR MIMD 

What do you think the mechanism 
might be for making a listener be 
part of a specific web app? 



Hint: how do you tell the Container 
about the other parts of your web 
app? Where might the Container 
discover your listener? 



you arc here * 
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using a 5erWefCome*TLisfener 



Tutorial: a simple ServlefContextUstener 

Nt»w we'll walk through ifce *i |- P s «i nuikim- .mil ■ mining a 
SrovtetGontexttlitener Th« Ujusi a simple u se dasc v» thai 
you can gee haw afl the pieces uork together; w-ns run using 
the database connection example because you'd have to id up a 
database to mttkr il work, Bui the steps arc the &Evnie regardUss of the 
code yon put in ycur listener callback methods, 

In this example, xs/e'tt turn a String init parameter into an actual 
object — ft Dog, The listener's job ii to get the contexl mil parameter 



fiir ihc 



1 1. 



breed (Beagle^ Boodle^ etc.), then use thai Striim 



i om&uct ii Dog object. The listener lhm stick* i]n- Def; object into 
a ServletContext attribute^ so thai the sen - let can retrieve h. 

The point is that the tervlel now has access to a shared application 
•ili/ii! .\\\ I his rave a 1 )i im , ami diie-ai'i have i<> read the context 
parameters, Whether the shared ftjbjeci is a Dinrora ilaiahaw 
connect ion doesn'l matter. The key is to use the mil parameters to 
create a sinjitr ulijn I thai .ill |)att< • >i I J 1 1 - a ftp will -hale 




D03 in-fco a ServleiCan-biet. 



Our Dog example: 

■ The listener object asks Hie ServletContextEvent 
object for a reference to the app's ServletContext. 

■ The listener uses the reference to the ServletContext 
to gel the contexl init parameter for 'breed", which is a 
String representing a dog breed 

■ The listener uses that dog breed String to conslruct a 
Dog object. 

■ The listener uses the reference to the ServletContext 
to sef the Dog attribute in the ServletContext. 

■ The tester serviet in this web app gets the Dog 
object from the ServletContexl and calls the Dog s 
getBreedQ method 
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Making and using a context listener 

Maybe you're still wondering \uw\ iln* Container dlBCOWM 

: 1 1 31 1 IIk--. I tie I Mri j i ■ s". . . YtiU tHttjf'ivUrt? a listener thi> Jtrriiir 
vufty y njf tell ffiv Cnitttiint'r tzhtntl the rest tif ynur ztwh 
fipp — tkwHgk the iwt,iffl/ Deployment Descriptor- 1 



Create a listener class 



«iWerface*> 
SwvtetComextUsiener 



contextlnilialxedfS&vteKMexlEvent) 



MyServletConlertUslflfier 



cwi^*1lf*i|t*iit&d(ServletCoRte)(tEv*nt) 
cor-ilfiiitDes irovac i Ser^le ■ConteKLE^eriL! 



Put the efass in WEB-INF.classes 




riai* C-it*«* lo <* tw 



To listen for 
SefvletContexl events, 
write a listener 
class that implements 
ServleffiontextListene] 4 , 
pm H in your WEB-INF/ 
classes directory, and tell 
ilie Container by putting a 
<H$tener> element in the 
Deployment Ttescriptor. 



Put a <listener> element in the 
web.xml Deployment Descriptor 



<listener~clas5> DD dew {Z S 1 h pJr * * tlw 

rem. example. MyServletContextLiatener ipi£o f £) j ' ll tt»heri element <w> 

</li E tener> ***** * j«t u.der <2_J!L 
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ServtetContextListener tutorial 



We Meed three classes and one PI? 

Far unr context listener test examplei w% tr«d ti> 

Write [ Im- cl.i-.se- ,iml 1 1 1 ■ ■ WcU.xni] file. 

Far ease of testing, w e'll put nil of the classes 
in the- *amr- |iarik*£i>t m*n. example 



The ServletC on text Listener 

M y Ser v I e tC o n text L i ste n« rj a va 

This class implements St nlciCntitextListener, 
Hcis i hi- context j til t parameters, create? the ling, 
.mil sets the Vii*\> as context attribute. 



5arvJetCenri?jrtf.rsl0fier 
? 



My Servf etCon texlListene r 



Mmaxi1nlilal«ed(Servi«ContexiEvwii> 
CDnte^estrc^fervletCoitotEYen!) 




The attribute class 
Dog.java 

['In [>Og class is just :i plain nlil.|ava il.iss. 
[is juli is let he the illinium 1 s aim' iliai rlic 
ServlctGontc^tLiatcneJ' bistaxjlJates in<l *r.is it] 
the ScrvlrtContcxl, for the scrvlet io retrieve. 



Dog 


Dog.;Slnngi 




gefflreedd 





L i £t* nfl rTaster. j a va 

J'hix cki>M extendi HllpKervh'l. Its juh is tn verify 
ihdii iln li-.h'iUT Viiirki't! I iv getting th* 1 3i m 
attribute Truiu 1 ] I f i [ii|tr\|. ipvukillU RetBrW^O "ft 
the Dug. and printing iln; n-sull W the response 
{mi wr'll scr il ill liu- hnwst-r}. 
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«irtfsrface;» 



GcnericServlet 



r 



HttpServlEt 



[ 



LislenerTester 



1 



•::nGe l.Hl l^srvlelR^i iesl I- irpSer/elRfispr; i^;, 




attributes and listeners 



Writing the listener class 

It work* jn-st I flit 1 other types ti£ listeners y»u (nielli 
Ik- finniliLH uiilu^mfi at Swtfigf GtJ] evefll bandters, 
Rt-mt'iril"T, .ill we nerd to do h gel ii\r cont*Xt inii 
parameter* in find mn the 6og breed, mike ilie Due; 
objccl, nnd pitt the Dog inio the context as ;m iUlribule. 




wnten;lnil4alized(S*rvfetCoiit&(lEven!) 
«sntexlDBs1royi9<J(Seiv1etCDn;ej(lEvoriL; 




package com. example; | ^ emC ^^va*ie™lei^*1etCo*^*^ s k ner 

itnprjrt ja'.MX.servlet, ' ; 

public -ldSi HySEJtvlaiCofiiL^iftLLiitidtJisj: impltdJne/i^E:: SeEvlatContaxtListcncr i 



public void contextlnitialized (SetylatCoijt&sitEvfirit event) [ 

— m the «U ^ e S«r*letG**e*t 



3erv let Con text sc = event ,get5erVletConte}tt (}; » 
String tegBreerf - ^«gefcf^*Psrameter ("breed "I; 
Dog d * new DogldogEreed) ; ^ — Make a 
scsetAttributeTdog", d) ; 



U« the £ 0ft te*t to set « attribute (3 
n**e/ object pair) that « tbe P03 Now 
aiher parti J the Jpp w ,|f be jbfe t* §e£ 

tt* e* the a&fefe (the 



public void con textiles troy ed ( Sqzv 1 etco n t e x tEvc n c event) | 
// nothing to 4o hcic 

We d<m't Med a»ytltih3 Km;. The D05 
<W«h't need to be cleaned . vuhe* the 
Content ^oe* away, $ „ einS ^Ke w >hole 
*FT « 9 0tn S d*** ihtludi^ tbe D03. 
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The attribute class 



Writing the attribute class (Pog) 

Oh ytiah, Mft foeed B Duff class— thi 1 cte f5epr¥^nfdn|| 
tin- objffi wr'ic uoini; in Muni- in [h<- SmlHContetfc 
after reading \hc contest iuii parameters, 

package com. example; 

public cla«4 Dog t a ft* old S» 

private String breed; 

public Dog (String breed) [ tVfc'jf 

this. breed - breed; K PJrj It bj$ 

public String getfireedO I 

EfetttCQ breed; f n 




0 : 

I thfl Light t read somewhere that servlet attributes 
had tobE Serializable... 

A: 

j-^ I ntti reit i ng q uestidn . The re are seve ral d if Fe ren.T 
attribute types, and whether the attribute should be 
Seria I ilsbJe q n ly ma iters with Se s & ion at tributes. And th e 
scenario in which it matters is only it the application is 
distributed across more than one JVM. We'll talk all about that 
in the Sessions chapter. 

There's no technical reed to have any attributes (including 
Session attributes} be Serializablo, although you might 
consider making all of your attributes Serializable by default, 
unless you have a really good reason NOT to. 

Think about it — are you really certain that nobody wili ever 
/.'.int tu Liu- ubjeil!. of thdl typu jrijunu'iiti ur rtituni valupb 
as part of a remote method call? Can you really guarantee that 
anyone who uses this class (Dog, in this case) will never run in 
a distributed environment? 

So, although you aren't reqwred to make any attributes 
Serializable. you probably ihaitld if you can. 
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Writing the scrvlet class 

Mil-, ili. tftc Class I J k i-Ll ti'ils tilt Si"' I 'V I fit liUilcXLL'jsLi-lH'f' 

IT everything working eight, by the time the 
Sr-iA li'i's <Ip0e(Q method ruiu for the firm liiiir, 
the Dnij will h<: waiting us an attribute in the 
Sen letCon text, 



package conn, example; 



HttpSsrvlet 



J 



1 



Listene (Tester 



import jdVdX . servlet, * f 
import javax.servlet.http, * 
import java.io.*; 



public class ListenerTesrei extends HttpServlBt ^ 



public void. doGet (HttpServletRequest request, HttpServletResponee response) 

thrown IOEx crept ion, ServletExcept ion I 

response . setContentType ("text /html" I i 
trintWriter out = response. getWriter I ) ; 



uut.println ("teat context attributes uet by Listenex^bo") / 
cnjt.println ( K <br>"J ; 
Dog dog 



(Dog) getservletcontext i ) . getAt tribute ( "dog" ) ; ^ Astern* ft£f fjR£ 

out, print in ["Dog' 5 breed is; " I dog , getBrsed () ) ? * 

d'jrf.'t T u (s fe wh£VT 
r fhf o*i W 'JI jet a fa,* 



aelAttributel) returns 
type Object! You need 
to cast the return! 



return rfgetfniFantfiieffMfl can be assigned 



exam crxte ir> at rta * £n 1 uS& 9 CHS * : 
fM8UP» cfc 3 SeivJefCorrtartJ 



Bid" 



you are fiere * 173 



configuring 3 listener in the DO 




oyment 




Now We tell tin- Cmmmu-r 1 1 ml w* have a lirtitiiei' For 
ibis iipp, usinn tin- <lisinirr> fkmeiu. This element is 
ample it needs ealtj the chus name- That* it. 



web. «m I 




wcb-app xi]ilj^s="http : // j ava . sun . com/xml /rj£j/"i 2oo" 

xtulns :xsi="http: / /www,w3 . org/2001/XMLSchenia-instance" 
xal:ac-h6imaLDCiit.luii = "ht.Lpi: // java.sun.com/janl/ins/ j2ee/web-app w 2_4.x.<id" 
versicni-"2.4*'> 

cservlet> 

<5erviet -name>L-isterierTester</servlet-niime> 
*:servIet-cLaES>coin .example. Lis tenerTester-'./servlet-cIaaa;* 
</serviat> 

<servLet -mnpping> 

<servist-natiie:-LLsteji«rTciHt.er</aervlBL'-name> 

<u rl -pat tern > /Li s t enTes t . do < /u r 1 -pa t teni> 
<, /cervlet-niapping> 



< c on tex t - par ani> 

<pa ram- name>bre ed< /p a ram- name> 
<param- val ue>Gr q at D ane< / par am - va lu q > 





<listener> 

<listener-class> 

com DxamplD . My SorvLetCon text Lis toner 
</ Listener-el ass> 





< /web-app'* 
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Vr^, " Hold on— how ate you tilling the Container 
that this is a listener for ServletCcrtejft events? There 
doesn't seem to be ait XML element for < listener- type> 
or anything that says what type of events this listener 
i i for. But I noti ted yo u have " Servl etCo nte* t Lis te n er" 
a* part of the das* name— is that how the Container 
knows? By the naming to nve ntion ? 



f\' No. There's, no homing convent ton. We just did it 
that way to make it painfully clear what hind of a dass we 
wrote. The Container figures. It out simply by inspecting 
the class and noticing the listener interface (or inter- 
faces; a listener can implement more than one listener 
interface). 



Does that mean there are other types of listen- 
ers in the servlet API? 



X\* Yes, there are several other types of listeners that 
we ll talk about in a minute, 
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compiling and depfoying the listener test 



Compile and deploy 

Left &i II -ill dirking. Thti ftcpg at*; 




cat 



Compile the three classes 

They're all in the same package... 

Create a new web app in Tomcat 

■ Create a directory named listenerTest and place it 
inside the Tomcat webapps directory. 

■ Create a directory named WEB -INF and place it 
inside the listenerTest directory. 

■ Put your web.xml file in the WEB-IN F directory. 

■ Make a classes directory inside WEB-IMF. 



■ Make a directory structure inside classes that 
matches your package structure: a directory called 
com thai terrains example. 



Copy your three compiled files int 
app directory structure in Tomcat 




Lisi*rvefTe*(er class 



Dog.ciass 



MyServletCoritextLtslerier.class 



lis tenerTes t / WEB - INF/cl a ss 



t e j* fcLi e fccine i? - class 



(4) Put your web.xml Deployment Descriptor into 
the WEB-INF directory for this web app 

1 i s tener Te s t/ WEB- INF/ web . xml 



Deploy the app by shutting down and 
restarting Tomcat 
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Try it out 



Brinx up your Ihowm-i and hi's fail (he servlet directly. Wife didn't 
luidn'i ncikiii^ .hi HTML ] i; , % ^ i - ~ J I .n i r>.y 1 In- >vr\ let by typing 
in dw URL ftoiiH the servlet mapping in the Dl) (U*t&ife*t^fofc 




+ j w hHp.'.loc9lho5?«0B0l5*norTe^i!tenT«?5t <*c 



lest context attributes set by listener 



Dogs breed is: Ureal Dane ^ *J ty* P<^ atbr^ 



Troubleshooting 

If v<hi gel a N\illPriiiilrrExtTpliim. you didn't jjn .1 Dim kick 
frum getAttribule('l, Check the String name used in .rrfAttributei} 
.utd make ^11 lh ■ it matches the Siring name you Ye using in 
grtAuributef). 

Recheck your wcb.xml and make sure the <hstrner> is registered. 

Try looking at the server logs and see if you can find ctut if the 
listener is actually being called. 

In ttiiikt- n ;is tonlUsing possible* we gw* (swrything ;i subtly 
different imiur. Wc W*tt1 to m.nV sure ycnl'rr paying attention ttl 
how thesr names are taed, and when you name everything the 
taut*, it's toUgh to tell how the names affect your app. 

Servlet 1 nanus LisrenerTester, class 

r 1 Jn«Jt -r _L 

Web app i Hrtrcn ,ry namr; tislenerTest Be LHrt M L^ste* 1 - 

URL pattom tnapp d ta thi* iervlet: iistMiX&st.do * 
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how our context listener works 



The full story,,. 

Hertr** thm scenwkt (in tin xiart (app kitU»tizationj u> 
finish (servtei twin;. You'll sec in Mep ! I we cemdenBcd 
rh«: Sfrvlft iokiaiizAlion iitio one hi^ st*? p. 



^ Container reads The Deployment Descrip- 
tor for this app. including the <ristener> and 
<c<jntext-panam> elements, 




Container 



redd 



& Ccntd i r»er e rentes a new Servl etCo ntext 
f or thi s appli eat ion , t hat a 1 1 parts of the 
app wifl share. 



ServlctContext 



Container creates a name/value pair of 
Strings for each context init parameter. 
Assume we have only One. 




Container gives the ServietCc ntext refer- 
ences to the name/ value parameters. 




String 



Container creates □ new instance of the 



J Container I 
1 I 



ri-ew 



instance of 
My Scr vl elCo nte xtLi s tener . c lass 



Cflntflmi 



Container calls the listener's 
contextlnitrnlizedQ method, 

in n rtPxa Strylst^fiflT^vTEVEflT 

The event object has a reference to 
the ServletCentext, sc The event- 
handlmg cade can get the 
context f rom the event, 
and get the content 
init parameter from 
the context. 



te r le 1£ a ftt ent 

i 

eiwi+extInitiiiliied(ServletCantextEvent 




.rj_ 
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The story continues 



(7) Listener asks ServletContextEwnt for a (g) Listener asks ServletContext for the 

reference to the Servlet£ointe*t. context in it parameter "breed 11 , 

S V- ^ServletContextO -^fl "\ ^^^15^ 
/ P ygctlr.tPo^mctcrrbrced'W \ 

listener ServJetContextEvent ^^p/ -yachts *-Tf^J 

listuncv 



listaner 



Listener uses the in it parameter to Listener seta the Dog as an attribute in 

construct anew Dog object. W the SeryletCo ntevt. 



instance of Dog. class N^i^ ServletContext 

listener listener 



Container makes a new Serulet (i.e., makes 
a new ServletConfig with init parameters, 
p,<ve.s the 5ef , vletCon,fig a reference to the 
ServfetContext, then colli the Servlet's 
initQ method) 




i 

iner in '+(S e rvlGtCoir5g) 



£t.--- ., 





instance gf 
Li'stenerTf-ster.ekss 



Servlet gets a request, and asks the 
ServietContext far the attribute "dog". 




Servlet 



-o 

ServletContext 



se-v-ci eel s jjetBfeedO on the Dog 
(and prints that to the HttpResponse). 

, — g*tB<-eed() — ^J^J 



Sc:vlt- 
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other listeners 



I jus*r thought of something., 
since attributes can be set 
prog ram mat icciJy (unlike mit 
parameter's), eon I listen fee attribute 
events? Like if someone adds or 
replaces a Dog? 




Listeners: wot just for 
context events,,, 

Where there's a lifrarU mommt, there's usually a 
tiltefUtr to hear about it. Besides iimtexl event*, 
yiiii can listen inr events related to ConteJtl 
ultubut/i, HeiA'let ret|iii's!s and iillribuies, and 
HTTI' session? and aUributrs, 





You don 't have to know all 
of me listener API. 

Other than ServletConlextListener, you 
rvaify (font need to memorize the methods of 
each of the listener interfaces. But... you DO 
n&&v to kfiow the kifius ofev&nis that you can 
iisten for. 

The exam objectrves are dear, you'll be given a 
scenario (a developer's goal for en application) 
and you'll need to decide which is the right type 
of listener ; or whether ,f s even POSSIBLE to he 
notified of that lifecycle event 







Nohc- w« don't talk about wwiont until the ne*t 

thSpieir, so (ion't worry about rt if you don 't yet 
know wtiit in HTTP session it ttr vkf you tltt - 
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Pick the Listener 

Match the scenario on the left with the 
listener interface- (at the bottom of rhe page) 
that supports that goal. Use each interface 
only once. (Yet, we KNOW we haven't looked at 
that yet. See what you can come up withjuit by 
looking at the names, Answer? ate on the next 
page, so don't peek!) 




Scenario 



Listener interface 



You want to know if an attribute in a 
web app context has been added, 
removed, or replaced. 



You want to know how many concurrent 
users (here ane In other words, you 
want to tree* trie active sessions 



You want to know each time a request 
comes in so that you can log it 



You want to know when a request 
attribute has been added, removed, 
or replaced. 

You have an attribute class (a class 
foranctyecl that will be put in an 
attribute') and yoy want objects of 
this type to be notified when they are 
bound to or removed from a session. 



You want to know when a session 
attrrtMe res been added, removed, 
or replaced. 



Choose from these listener interfaces. 
Use each listener only once, 



HtSpSsssionA ttributeListener ServletRequesiLislfmer 
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common listeners 

The eight listeners 



Scenario 


Listener interface 


Event type 


You want lo know if an attribute in a 
web app context has been added, 
removed, or reptaced 


javax servlel.ServtrtCorrtejcttttxibilteListener 

3{LflOUl&f\vu&Q 

atinbuteRemoved 
attributeReplaced 


ServletContextAttributeEvent 


You want to know how many 

wof ds ycu want lo track She active 
sessions. (We cover sessions in 
detail in ihe next chapter). 


javax seevlet Tills- HttpSessionListener 

sattkoibatooyed 


HttpSessionEvent 


You want to know each time a 
request comes m. so that you can 
leg ft 


javax serulei ServtetRequestUstenef 

nsqoesfDesJttsyed 


ServleiRequestEvent 


You want to know when a 
request attribute has been added, 
removed, or replaced. 


javax.servlet.ServtErtRequestAttributelJstener 

atifibuteAtided 
amibuteRemowd 


ServleSRequeslAtVlbuijeEvent 


You have arc attribute class (a class 
for an object mat will be stored as 
an attribute) and you want objects of 
in s type to be notified wfien they are 
bound to or removed from a session. 


jaw Sen/let hl!p HltpSeS&iarieindingt isnener 

valueBound 
vahieUnbountf 


HttpSessionBuidingEuenl 


You want lo know when a session 
aurinuie nas ueen auGeo. renjoveo 


javax servlethnp HttpSeasSooAttributeUstener 

_ u _'L . ,J _ A ■ I _ _J 


HttpSessionBindingEwnt 


You want to know if a context has 
been created c destroyed 


javax sorvioi ServletCont&xtListener 


ServlelContextEvemt 


You have arc attribute class, and 
you want objects of this type to be 
notified when the session to which 
they're bound is migr aling to and 
ftorn another JVM 


javast.serv.lal http HttpSessmnAclivationListener 

»wtaJiDWAcflK9fe 
sesstoflWP&savaft 


HttoSessionEvent 

ft'* NOT , m^e*^^ti^«' t, ' ( " t " 
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The HttpSessiOHBiMdiHgListencr 

You might In* conftwed about the difXetPnca: h-twini an 
HttfiSesaionSin/jfl^LHtefier and an Hi.i|>St L ssion:fr7jf^'(/rUsi.e.Tin- 
(Well, no) icaUj but nomeont you work with. j 

\ i >l:iui rtld HllpSfs-iinn.|ffn(l(Ef^I,is[fiirr is just ;i (lass that Wrtuls I" kmm 
"lit'ii fwj iyi"' of attribute has bern ;iddrd. removed, or replaced in <t 
Session, Hul ilif Http8*s*km5tfldfi^il4stciicr exials k.c» (tint ihr juribuif ihvfj 
run lind out when // has been added to or removed iiom a Session, 

package coTtwexaiTple; 
import javax.seivlet.rtttp, ' ; 



public class Dog IdipiejfieJitL, HttpSassioriBindingLis tenor 

private String breed/ 




public Hog (String breed) 
this . breed-breert; 



public String getflreedO 
return breed; 

J 



public void valueBaund(Http5essionBindittcjEvent event) | 

// code to run now that I know I'm in a session 

1 

public void valueUnbound(HttpSessionBindirigEvent ev&nt) i 

// code Lo run now that T know I aw na longer part of a session 



0- 

OK. I gat how it works, I get that the Dog Ion 
attribute that'll be added tea session) wants to know 
when It's in or out of a senior., What I don't get is IWK. 

_/\." Tyon know anything about Entity beans,- then you 
can picture this capability as a kind of "poor man's entity 
bean*, tf you don't know about entity beans, you should run 
to your nearest bookstore and buy two copies of Headfirst 
E/fHone for you, one for your significant other so you can 
share special moments discussing it). 

In the meantime, here's a way to think about it— imagine 



the Uoo, is a Customer class, with each active instance 
representing a single customer's info for name, address, 
order info, etc. The fajrdata js stored in an underlying 
database, You use the database info to populate the fields 
of The Customer object, but the issue is how end when 
do you keep the database record and the Customer info 
synchronized? You know that whenever a Customer object 
is added to a session, it's rime to refresh t he fields of the 
Customer with (his l uhtom^r's ddta from his r<?< tird in the 
database. So the valueBoundi.! method is like a kick that 
says, "Go load me up with fresh data from the database.., 
Just in ease it changed since the last time I was used.' Then 
valueUnbound{) is a kick that says, "Update the database 
with the value of the Customer object fields." 
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ffsrener chart 



Remembering tKe Listeners 

Do your bfiit to nil in the slots in this table. Keep in mind 
that the listener interfaces and methods follow a consistent 
naming pattern (mostly), 
Answers are at the end of the chapter. 



Attribute listeners 



Other lifecycle listeners 



Methods in all attribute 
listeners (except 
binding listener) 



Lifecycle events related 
to sessions (excluding 
attribute-related events) 



Lifecycle events related 
to requests (excluding 
attribute-related events) 



Lifecycle events related 
to servlet context 
(excluding attribute- 
related events) 
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attributes and • 



What exactly, aw attribute? 

Wl' lav* haw the SgrvfoCentexi ftstewi hvnu^I h Dot; 
object (after getting tUc context iuit parameter) and 
wju ;iU|i- tit -iik't i.nt'ii ill** D<»i{ Into ih* j StrvletGontiast as 
hii attribute, set that other pari.'! of thr. app rciuld nci n. 
Earlier, with the beer tutorial, wc law how thr wrvlct was 
able to stick the res lilts of the call to ilio model Into th< 
Request (u-suLiHy HttpServletRequeatJ object as 
m attribute [so thai the JSP/ vie* cotitd get the 
value). 

An attribute ia an object set (referred ta m 
bound} mm one t»r three other lervltf AIM 
objecss— fSetvlet^oniexii Hii pSerYlctReq lic»i 
[w'SciTlclKtrqLU'iil ,nt I h tpSc^ii m Vim i .mi 
think of it as simply a name/value pair [where 



HI' I ^ LI IN I 1 1 1 L ■ a 



ml ll 



l' valui' ik ait 



l]!'l 1 



in li f i ■ l l 1 1 hra.taace variable* tti reality we dtoi*t know 
rn- tart- haw it's aciualh implf merited all w<; really 
i aic about is thr topi in whidi thr attribute exists. In 
mher words. ttlAo tan sec il and f:oz<' img docs it live. 

An attribute is lite an 
object pinned to a bulletin 
board. Somebody sluek H 
on the board so that others 
can get it. 

TliP KiP GUPSfinnS flFf : Wrifl 

j. "j-- L -»-«v* — s * & •• ajar 

has access to the bulletin 




it ]We? In other words, 
what is (he scope of (he 
attribute? 



Un set tt'a 
beard? 
WW tin get S*d 
let the attnbotes? 
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attributes vs. parameters 



Attributes are not parameters! 

lf yoti'tv new to sorvlpts, you might need t<> sp^itd some 
time reinforcing i h<- difference betwesn attributes ;incl 
panmftm. R-i'sr assured dun when \\t* created (In* exam we 
spent jusi that liulr liii of t-xini lime trying to make suit- 
wc made attribute and parameter questions as confusing 
as possible.* 





Attributes 


Parameters 


Types 


Appl ication/conteKl 
Request -p^, - hl ^ «rxlet— 
Session afct«I»t* <>*t 
"•^ " ne w^*" 


Application/context init parameters 

n^yUD^ a 1 PI ■ 1^ 3 

Servlet in it parameters No ^5 a* , 

lesion ySri^tkXf^. 


Method to set 


setAtfribute( String name. Object value) 


YOU CANNOT set Application and 
Servfet init parameters-^they're set 
in the DD. remember? M'lth Requml 
parameters, you can ad|ust me query Slnng. 
but ttiat's different ) 


Return type 


Object 


String ^— ^ 


UAfhnrf 4a nat 


peiAttribuietSirina namei 


(letinnFarameteTiSiririfl namei 



*I1'9 ma IF we'd mads the exam Eanple and straightforward 
and easy, you wouldn't feel thai sense of pride a^d accexn- 
phshnett from passing the exam Making Hie esam difficult 
enough to ensure lhal you'd need to buy a study guide in 
order 10 pass d was never EVER , a part of our thinking No , 
seriously We were just minding ol yoir. 



1 86 efiapfer 5 



attributes and 



The Three Scopes: Context Request and Session 





Accessible to only Those with access to a specific ServletRequest 

you are here > 187 



attribute scope exercise 



Attribute Scope 

Do your best to fil! in the slats, in this table. You REALLY need to understand 
attribute scope for the warn {and the real world) because you have to know 
which scope is the- best to use for a given scenario. You'll ice the answer in a 
few pages, but don't look aheadl If you'ne going to take the exam, trust Us— 
yuu need rofili this out yourself by taking the time to think it through. 





Accessibility 

(who Can it) 


Scope 

(how long dues it live) 


What it's good for 










HttpSession 








Request 
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attributes and listeners 

Attribute API 

Tiie three attribute snopga context, 
request, and session are handled by 
the ServletGcuttesi, SefvJetRequest, 
and HnpSt-ssii.il] hihtIWk. Tin 1 Al'l 
methods for attributes arc exneUv the 
same in every interlace. 



Object getAttribute(String name} 
voi d s et Attri b ute (St ri n g n a me, O bject value) 
void removeAttribute(String name} 
Enumeration getAttributeNames() 



Context 



Request 



Session 



«int&fBix» 
Ssrvta (Contort 




getittitParametsrfString) 
jefJrrrjParameferlVanJesi'/ 

QBtAlttibutafSbing) 
totAHtibutai&tflng. Object) 
removed ttribute($triim} 
OttAltrltHittNamaQ 

getStfl/arinlai) 

getReaPttih(Stting) 
getRescwrceAsSfreamfString} 
QuiRequastDispatcherfStriflQ) 
log/String) 

//MANY mow methods... 





gelPafamoS&ri String) 
getAttributefSUfog) 
SBlAttrlhutefStrifig, OtyeefJ 
Kit ? o v s A ttribu te( S trift g) 
gittAttribntBNAnteSf) 
IS MANY mors methods. 




QetHeaderi&wngl Jfofak» 
// MANY movr 




sotAttributefSlring. Object, 
rewioveJ ttribute(£trin g) 
getAttributeNzmEifl 

setMaxlnaxtivetrtervaHintl 
gtlldfl 

geiLastAccessefntmeO 
11 MANY mora methods.. 
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attribute strangeness 

The dark side of attributes... 

Kim dor ides to it-st tint Attributes Efc *oi>. mi attribute 
and then immediately the value ojf the attribute and 
displays ii in ilte rewptmstn Hi* dot inn looks like iliis: 

public void doGcst (HttpServlctRoquest request, HttpSeivletfiesponee response) 

tJvr*WS TOF-xpeption, ServletExcapt ion [ 

response .setContent:Type( > ''text /html") ; 
PrintWriter out = response. getWriter. () ; 

out .println ("tost context <attribute£j<bi >" ) ; 

'jeLSei-vietCdiiLext () . setALLr ibute ( "Foo", "22"); 
get Servlet Context (} . set Attribute ("bar", "42") ; 

out.println (getServletContext () .getAttr ibute ("fen;-") ); 
out .println (getservletcontext () .qetAttr ibute ("bat") ) ; 

I 



Hon-'-, What he so*-* (In- lirst i mix- lir- hhk i<. 
Id cxacUy what he expected. 




190 chapter 5 



attributes and listeners 



But then something goes horribly wrong. 

I'ln M-cdiut I inn ■ he rum i.!. hr's ihtttk«l tnifc: 



test contest attributes 




22 16 



FLEX YOUR MIND 

Loak closely at the code, and think about 
what's happening. Do you see anything that 
could explain the problem? 

You might not have enough info to so I we the 
mystery, so here's another clue; Kim put this 
code in a test servlet that's part of a larger 
test web app. In other words, the servlet that 
holds this doGet() method was deployed as 
part of a larger app. 

Now can you figure it out? 
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contejf r scope and thread-safety 



There must be 
another aervtct hitting 
"the same context 

Qtt,-| UutC. 




Context scope isn't thread-safe! 

'] Il,h"-j t!)f problem- 

Remember, everyone in ihe app lias access tci 
CQflteXI altrilmies, and thai means multiple 
s< ■ i \ 1 1 ■ t s Am I mii Iliple jom'Itttis means yim 
might haz'i' multiple tkmaths. re (|Ut'Hl!S im 

tdiii urrt'ndy hiindled, eltch in ;i separate thread. 
This happens regardless of whether the requests 
are cotoins in for the same or diiYercnt servli ts. 



Thread f\ 



□ 




Tin-tad C 





Yikesf ^hotKev ftx^et ihi± is fart *f Ike 

sjiae wfb VvlWiMJ nn A separate tkrtad 

let UK *W attribute 

Am! Hat's mj-t j||. tke Cwt»i*tv «*ight 
liuKk another tkread -for Serifltt f\ to 
handle a third client-.- 
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attributes and listeners 

The problem in slow motion... 

H«fcV#Jmi happened w Kin& m\ servtet 




Strtng String 



Thread E becomes the running thread {thread 
A goes back to Runnable-but-not-Punmng), and 
sets the context attribute "bar" with a value 
of "lb". (The 42 Fs now gone,) 




Thread B 




String 



Thread A becomes the running thread 
again, and gets the value of "bar" and 
prints itta the response. 




TWead A 




StrifKJ 



out.printlntgetServletContextO . get Attribute ("f on") ) ; / «rM t^ea 
o U L,ptipLln(get5ervletCQtitext.O .getALLribute ("bat") ) 'M "bar" V * 



getServletCop.text (J 
getSexvleLContext. () 



. setAttribute ( "f oo" f 
.set-Attribute ("bat". 



f "b 

tod bee* * 
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threads and context attributes 



How do we make context 
attributes thread-safe? 

Lr I V hear what tumv "I 1 1 1 ■ - uthfc! 
drvrloprrs haw to say.,, 
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attributes and listeners 



Synchronizing the service method is 
a spectacularly PAP idea 

OK. to wr know thai synchronizing tin* jcrvksc ffltethod 
wiJl kill mir wncunrnry, but il docs give y<>n ilur thread 
|ifni' ( li'iti, riifln.' Likr Li k i k .U tilt!- J<'M,:il i ikJc, utitl r|n iilc 
whether it would prevent the problem Kim Imcl with the 
context Etttribote being change hy another «rrvfefc«. 



public aynelurODlacd void cloCet (HttpServlotRGqueflt: request, SlctpSflivletResponse response] 

throws IOException, ServletException I 

response . setContent'J'ype ("text/html") ; 
PrifitWriter nyt = response, getWj-jtett) ; 

out.printin ("test context attributes<br>") i 

getServletContext () .setAttribute rtoo", *22") ; 
getSetvletContextO .setAttribute ("bar", M2") ; 

out.printin {getServletContext () .getAttribute ( rt £W) J j 
out. print In {getServletContext () « get At tribute ("bar") | ; 




.Vhjr. do fK,rk-* IV. I ,i (\* 
{he Problem had? Look 
badk at tiw io<i(; W 
diagrams if you're not s^e 



you are bene f 195 



don't synchronize ihe service method 

Synchronizing the service method 
won t protect a context attribute! 

SynchrOfiteuig die service method tneaiu ili.n onl) oac thread 
in ,i scrt'Lt*i l« L rmiiiiiiK ;ti lime... Imi il docan'l stop ttket 
scrvlets limn accessing the attribute! 

SyncliroiuKiiiR the ictvice rnrtlnxl would hlnp mher ih rends 
from the same servlet from accessing the context attribute?, 
but it won't da anything to stop a completely ttifferrat servleL 




C \p.r,1 A 




CIieiiI C 



ff ye* syniKiro«i« the service 
method, yot> WILL step the 
Co"tJ<ner -from ttdttini] 3r>y 
other me-fchods for new iil*iu(j 

imlct A thu 
IVlLL pvotett the £»te«t 

> ..nr.-rfi ij service method of 
Servlet A- 



Qkt you won't do anything 

to j|»o OTHER servlcb' 

Re^Jrdltis of whither the 
strxite methods ii\ other 
serifleti are synchronized 
or not. it (till meant 
other of the doo 

Uitf; ts t^J tcr.tcT-t 

it-tribute. 
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attributes and listeners 



You don't need a lock on the servict ... 
you need the lock on the context ! 



'I'll' I'. |'M 1 1 iv;n lu ] I hi . imN-M .HI - il '.- In 

synt hroitizi- ON |hr nmlcxl uhjrrl itself. U" everyone 
aeccssini* the rnnlrxl has to first got the lock on the cuntexl 
fiUji i I. ihi'ii you're fLLEiranleed that only one thread al .1 
time am lie Letting ttr setting (he rmUexi iitirihute. Hut... 
tin-re's Mill Lk 1 1 //'iliere. h mil) works if tt/l r>}' tttr nflirt cWr thai 
mtinipuhiti. tftf sm* notilni ttttrilmtn ALSO gntkrintifl M tkr 
SmUtConttxt. If qjotfc doe$n'i .i*k far ibe lock, then thai code 

is still BtW to hit the Context attributes, But if you're desiigiiinir 
the web upp. then \vu cm deride to make everyone ask for the 
Un'k before accessing the attributes. 





f***^ attribute, 

w.tWM * Sot* 1 ". 
te«.« e otter ? *rb ti* 



Servlet Cents xt 



public void doGet (HttpServ let Request request, HttpServlet Response response) 

throws IOEzception r ServletException I 



response. a&tr.cintQnt!Pypa t"taxt/hrml " I j 
Print Writer out - response. getWriter 0 ; 

out. printin Ctest context attributes<br>") ; 

synchronized (getServletCoritejctO ) { 

getServlet Context () .set At tribute |"foo*, "22"} ; 
oetSei vlet context () .net-Attribute ("bar", "42"); 



...g t . print In (getServie tCont-ejU (] . t At t r ibute ("too" \ J ; 
out. printin (getServletContext () .getftttribute ("bar") I ; 



Expect to se* lots of 

thread-safety 



0n tne exam, yoWtf *» ° f ^ s ^ w ' 

fyaactesto vault h*» t0 deade ,( the 
mM given a particular 90*1- b ^ US t, t 
Z col I tegti (capites 3 nd runsl do eS n t 
mean ifll solve [fie problem 



you aro here * 197 



session attributes and thread-safety 



Are SmiOH attributes thread-safe? 

Think about it. 

We haven't utked aboul HTTP session; in detail yet £we will 

in (he Sessions chapter.', but you already know lhal a session 
is an object used to maintain conversational ■state with a 
client. ("In- vs*ion persists ticron multiplf ffljtusti from the wait 
clitftt. But it's still just one cllenl we're talking about 

And if \\\ cme client, and li tingle client can be in only 
one mjiit'si ai jl time clncsn'i thai automatically mean that 
se$MfMU are thread-sate? In Other words, even if multiple 
servlel-> nit involved, ai atn given monu'nl there"* nnly one 
request from that particular client... so there 'a only aiic 
thread operating on that session at a time. Right? 



Revest f\ / Thread fr 




^ Servlet S 
fli^st B / TVead B 



get 




JSP View 



Even though litith servlets 'an access thr Session attribute? 
ui separate threads, each ihread is a separate request. So it 
looks safe. 

Unless... 

Can yon think nf a icenario in which there tbulitot m&tc 
ihtiit line requeti of thr tmt timt,Jri>m thr mm? tfmfi 

What do yon think? An- session attributes 
guarantee*! thread-safe? 
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attributes and Jisfeners 



What's KEAUY true about attributes 
and thread-safety? 



Listen in a* our two bla^k-hel'* discuss the 
issue* .iri mini protccTirig ilu- itttti of aHrirmies 
from niullilhrradiii^ pmldrmfi. 




wic know thai ronton attribute* are tnbwenuy WOT 
safr, Ut'ciuisr .ill pieces n| tin' app <",<u .nccs* cmnt-xi 
annuities, (bam any request [which means any 
thread), 



Very good. Now what abmn Swisinn .lUrihiitr*, Art- 

(An stiff ? 



You have smmA to learn, grasshopper. Voh flo no! 
know th« truth about session attributes. Meditate <>n 
[his before speakiiiu again 

You itniM think outside thi' Container. 
Color outside th* lilted, fffm with sdmfo 



Yes? The CaiiiiiiiHi kiln see lit*- request (rofll the 

second window a* coming Bcom the same "***ion. 

And bow wmld yon prolrrl ilu ■-■<■■ se?sina attributes 
fir.ni the havoc of multiple threads.? 



That is «ood, j*9^ hut synchronize on what? 



Yes master*. And J know that synchronizing the service 
method is not a solution, because although it w ill atop 
that nerviet from Mnifcing wore than one requeat at 
ii lime, it will NOT stop other scrvlet* htkIJSP* in the 
sum* 4 web ;tpp from accessing the context 



Yea master. Tbty fttr lor only wrr client, and the laws 
t*r physics prevent .1 diem front making mure than 
one request at a time. 



Qui master, 1 have tjirdit.iti.il pnd still 1 do not know 
how one client cuuld luivfe more than one requests 



Very wise advice, master! J have it! Thi 1 ctietti t'ouht 

a/it-ii a iii'iv fcjyjiitwi'f win dim:' llh t ! iiiuei . ..11 

nijJ! use- the same session fur a client, even though. \i\ 
rfHimiiT Irotti .1 dilii'irtii instance o| id-- browser.' 



So Session attributes are net thread-sale, and lliey, loo, 
itiusi be prcte tect. 1 will meditate on Uils... 



Ah... 1 must synchronize the purl of my code that 
accesses the session attributes. Just the way we did lor 
iln< context attributes. 



f must xynvhrwtizK nn the HltpSnssitm! 
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synchronize on the session 



Protect session attributes by 
synchronizing on the HttpSession 

Look, fU rln- [i'[-|inii|iu- we iisrd lu prmcri ihr r«nk\t 
iillrikik's, Whrn (iitl wr dp? 

Ymii l ;m <ln ihr sunk- thing With session attributes! by 
synchronizing on the HltpScssion object! 

public void. doGet UtttpServletRequest request, HttpServletResponse response] 

throws tOException, ServletExcept lan | 

response. setCc-ntsntTvpe ("t-.Gxt/htiTil") ; 
Pi-iu5.WriL(;r out = teaponae. getWriLer ( i f 



out. println ("test session at tr ibut es<:b r >") ; 
HttpSession session = request .getSession {) ; 

synchronized ( session ) { 1 ™ ; protests 

sessicm.sfrtAttributerfoo", "22"); HttfSeM* 0 " " 
session. eatAttr Lbute ("bat", "42"); st a,e* ittributt* 



out . println (session .getAttribute ("■foo") 1 ; 
out. println (session. getAttr ibute ( ""bar") } ; 

i 



0: 



_jt r ■ II -> t _ »k_ - - jl . eld 

i^ ii n l ini> gvtimii; is inn rvuity d (juhiui 

a client will q pen another browser window? 



Of course It is. Surely you've done I h is. yourself 
wilhour a w. ami thought — opened 3 second Window 
because you were tired of waiting for the other one to 
respond, or because you minimized one, or misplaced the 
window without realizing it, etc. The point is, you can't 
take the chance if you need thread-safety for your session 
variables. You have to know that it's quite possible for a 
session-scoped attribute to be used by more lhan one 
thread at a time. 



causes a lot of overriuarj d nel hurts concurrency? 

You should ALWAYS think carefully before 
synchronizing any code, because you're rig In— it does 
add some expense in checking, acquiring, and releasing 
locks. If you need protection, then use synchronization but 
remember the standard rule of all forms of locking— keep 
the lock for the shortest amount of time to accomplish 
your goall In other words, don't synchronize the code that 
doesn't access the protected state- Make your synchronized 
block a* small as pus si ble, Get t he lock, get i n. g et w hat 
yo u need , and get t he h eck o ut so t he I ock can relea se and 

□ ther Threads can run 1 hat c ode. 
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attributes and lisisnsrs 



SmgkThreadModel is designed to 
protect instance variables 

Hcre^s what the servlet specific tit ion says About tin- 
SingLoThroadModcl ■ ■! VI M , LjiLi- i Hil <■: 



0>C key 



KiL.^iius iliiM H-iilrh handle i>nh mir iti|lh>i at .1 time, 

This interface ha* lira methods, JT a servlet implements 
this interlace, you ife guaranteed thai m> two ihrrads 
' will L*Sfcitlr I'lmeurriTilly in ihe ■■itrylyt's Metric ■ im 1 1 ■■ ■■ I . 
Thr- servlet container can make this guarantee ^ 
t^nchroat^iag ac<*C8s to n stogk in»tmice of the «fervict, 

or by maintaining ,t pool of seisin instances and 
dupotctimg each new request in a, free servlet, 



Put how docs the web container guarantee a 
servlet gets only one request at a time? 

Tin* web Gofttalitct vendor ha* a choke. The coutxmer 
can maintain a single servlet, but queue every request and 
process cine request completely bci'orc allowing (In ur\t 
request in proceeds Or die eonlamei' can i-reate .1 pool of 
servtel instances and pmciss sach request ooticuiTejitljs 
one pet sen lei instant 

Which StM Strategy do you think is better? 



Queue all requests 



Requestl 



Q 



added b 



Jnd & e ^j, 

*** off o he 

&e w,<ji c 
sorbet iw^^ 




»VicJ*i e*t*«d 

HTTPSemtt.. 



bui ;jn alio 

i-f fcmen-fc -the 

S^eTWadAfodel 



HTTPSafvtef 
I'ffCfil javax . servletj 



— ™— 



Sew* requests through a pool 



Requestl 




Requests 



gg£ fewest "~V 

-to ^ Requast3 
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request queueing or ssrvfet pooling 



Which is the better STM implementation? 

Once again *ve wtati considl out bhu k belts 
These (Mys "I 1 ' 111 know tin- score on the l>e*t STM 
lmplcm«mkm. Lefs see them ban It- ii ouu. 




due Lie all requests 



Queuing the rrqitrsls 10 a single itcrvlrt makes (lie 
mint sense h clearly implement* wluil the spec 
writer* intended. 



Yeti but that is tin- ttnly wav to protect die instance 
Variable* of the- sefYlet, 



Ahh, ypu see decptj into tin- fortune cookie nq 

student, but ynu di> no) sec just how deadly that 
fortune might be... 



Send requests through a pool 



Hut muster, won't performance be imparted? Surely, 
queuing each request prevents multiple user* from 
ui i ess r 1 1 die same seevtet? 



Htll master, tike n milliner tltav also create a I nl 
servlfl installers. Then lite COntainCT 'Mil pi'nress 
i.rif n'i'|iie-i with Due scntri instance and another 
request with a second instance, Each request is 

handled in parallel. 



teak in riddles, master. What could (xwsibly go 
win m r with i he jHKiling strategy? 



Till- mm \ let sjjei defines lh.it a single servlet 
declaration in tin- tlepli lyiiienl flesi riplor beemin^ 

a single object instance at runtime, Inn not* using 
the STM interface, (his definition is no lunger 
valid. Can you imagine .1 scenario in which having 
multiple servlet instances fail*? 



YKS! You have penetrated the depth rtf the ruse 
that is servlrl pooling* The semantics of the "single 
servlcl instance" deliniiioii is lost. The scrvlel has 
lost touch with reality. 



Ilium, -L^ 1 1 ll 1 iJ onr af (he instance variables is meant 
to record how many request* have been processed. 
The coiinter variable would have several different 
rornirSi and none of £hcm would tie right... only the 
nimmation of them is correct 
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attributes and listeners 



dim? l^^Vj est jotijs 

W hat's up ? Why i s th e serul et s p ei 5 □ w i i hy- washy? 



The specification writers wanted lo give ihe container 
vendor* the opportunity to compete with each other in 
terms of performance and flexibility. 



How do I know which strategy my vendor uses? 




Wi'll, hopefully it is wriitfii down in some part of the 
i for the web container If not. you should 
contact your contain ei vendor, and ask them. 

0- 

How wi II the STM s t rategy tlia nge -howl write my 
lervletcode? 



A 



If the container uses a queuing strategy, then the 
Single servlet in stance" semantic 5 still hold and yon do not 
need to ma ke a ny cod e c ha nges . But if the container uses 
a pooling strategy, then the semantics of some instance 
variables might change. For example, if you have an instance 
variable that holds a "request counter," then that variable no 
longer can be counted on when multiple sender instances 
are created in the pool, In this case, you could choose to 
make the counter variable a class variable ins-read, 



But are class variables thread safe? 



j/^* No, they ate not, and the STM mechanism does not 
help with class variables. Yes, It protects instance variables 
from concurrent access, but by pooling multiple instances 
the semantics of the servlet changes, Furthermore, STM does 
not help with other variable or attribute scopes. You are on 
your own.. 



So what good ii using the 5 ing let h read Mod el? 



JfL 

jftefa> You do not need to 
<V V ** krjow about these 
container STM strategfes 
I for the exam. 

to proted instanM ranaWHS 



A: 

x\ None, really. Which is why STM has been deprecated 
from the servlet API? -r 




per your pencil 



Place a checkmark next to t he tilings thai are 
NOT thread-safe. (We ofrof 9i$ first one.J 

j/'co/itejil-sioped attributes 
D session-scoped atintnires 
O Request-scoped attributes 

□ Insiance variables in the servlet 

□ Local variables in service rnettods 

□ Static variables in (he senM 
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request attributes are thread-safe 



Only Request attributes and local 
variables are thread-safe! 

Thai'i it- (We inrludt- method parameter* tvbca we iaj 
*'lntnl variable***), Errrythiug tiifia subject Hi rnaiiipulntiun 
hy muhipk' threads, unless j*os do something m slop ii. 



qreJK 5 



IttIt Questions 

* So instance variables arwi f threaet-satfe? 



A: 
That's right. If you have multiple clients mak- 
ing requests on that servlel, thai means multiple 
threads i unning that servlet code. And alt threads 
have acces* to the servlefs instance variables, so 
instance variables aren't thread-safe. 



Q,* But they WOULD be thread -safe if you impU 
mented the SmgleTh read Model, right? 

A: 

i\ Yes, because you'd never have more than 
one thread for that servlet, so the instance variables 
would be thread-safe. 6 ut of cou rs e n obody wou I d 
ever allow you into the servlets club ever again. 



I ju*t t jsI k i h r, h yprtth^t it Ally. A « ln r 

"if someone WERE stupid enough to implement 
Si ngleTh read Model... Not that I would ever do 
it. But wh i k we're bet n g h yp other, ical ... if I h ave a 
friend who, say, synchronize; the service method. 



thread safe? 

A: 

t\ Ve s. But you r trien d wou I d be an i diot. T he 
effect of implementing 5 ingle/Thread Model is virtually 
the same as synchronizing the service method. Both 
can bring a web app to its knees without protecting 
rite session and context s rate. 



But if you're not supposed to use Single- 
Thread Model or synchronize, the service method, 
then haw 00 you make instance variables thread- 
safe? 



A 



You don't! Look at a well-written servlet. and 
chances are you won't find any instance variables. Or 
at least any thai are non-final. (And since you're a Java 
programmer you know that even a final variable can 
Still be manipulated unless it's immutable.) 

So Just don't use instance variables if you need 
thread-safe state, because ail threads for thai servlet 
can step an instance variables. 



Then what SHOULD you use if yen need mul- 
tiple instances of the servlet to share something? 



Stop right there! You said "multiple instances 
at the servlet* We know you didn't metm that, be- 
cause there is always only ONE instance of the servlet. 
One instance, many threads. 

If you want all the threads to access a value, decide 
which attribute state makes the most sense, and store 
ihe value in an attribute. Chances are, you can solve 
your problems in one of two ways: 

1 1 Declare the variable as a local variable within the 
service method, rattier than as an instance variable.. 

OR 

2) Use an attribute in the most appropriate scope. 
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Request attributes and Request dispatching 



Eteqooct initiiuiifs make sense when you 
want sunn: other eompowM at ihr app to 
ink? over all pari of ih<- request. Our 
typical, simple example h ;m MYV app dial 
stiirtH with a scrvlcl ronirolter, bul t-nds with a 
JSP I'/fit 1 . The controller communicates with 

iIl<- i I. I. ,U !•> k o.U.i Mi. M lh. i<* 

ii.-td:- in itivlcr i<i 1.niikl iho HSpOftse.n Ther^'a 
no reason to pul ilit- tliil. i in a COOtCX! or 
se&iort aiirilmir. Hflce tl applies unfr to ihi* 
rcc|ucii. s<i ivi pul il in I Ik- rrqursi snipe. 

So how do Wc makr another pari ol the 
cnmpoocTU talsi? run" the rrqin.-slL* Willi ;v 



// erode Jn a doGeU) 
BeerExpert be = new BeerExpert (> ; 
ArrayList result - be.getBrands <c) ; >"d» ^f 0 * iCo ? e 



request, sethttribute { "styles" , result) 

^ Car the J£r 

RequeiiCDiLipaLchet vitw = 

roqujast.getRjEfijueBtDiispatchex ("result. Jap") ; 



viow. foi ward ( request . i !■.-■.[. ^-i r, *o j : 
Tell JSP ^ iak; , 



to tJJce over {he , j , 



The Beer servlet calls the getBrends() 
method on the model thot returns some 
data ThoT The view needs. 



The servlet sets a Request attribute named "styles". 
(First it puts "Moose Drosl" into an ArrayList.) 




getBnandsQ 
Moose Drool 




Controller* 



Model object 




set Attn bute {"sty Fes*, resuits ) 



Controller 



) 

HttpRcquest 



The servlet asks the HttpRequest for a 
Request Dispatcher, passing in a relative 
path to the view JSP, 



getftequest Dispatt her(unTo View} 




Centre! ler 



) 

Http Request 



The servlet calk forward () on the Request- 
Dispatcher, to tell the JSp* to toke oyer 
the request. (Not shown; the JSP gets the 
forwarded request. and gets the 'styles" at- 
tribute from the Request scope.) 



f orwordfrequest, response) 




SenHrt 

Controller 



) 



R&queatDispetcher 
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the RequeslDispalcher 



RequestPispatcher revealed 

Requcs«Di»pB(cJters haw only two methods- fom#4{j and 
inihiitff), Both take the request and response nhjet'i* iwhirh 
i In- aamppapfti you're forwarding u> will need to Rni*h 
the job'. Of i lie two methods, forward^ is by Car the most 
popular. It's very unlikely you'll use the include method from 
a controller servlrt; however, behind die scenes die include 
method is befog wed l>\ JSIV in the <jsp:iiiclude> standard 
action [which well review in chapter 8), Vbu can net a 
EtequestTHspat* I n-r hi two Ways: from the r«|ii«1 or from die 
context Re«urdless of where you lici it. you have to u-ll ii the 
web component lo which you're forwarding the request. In 
other words, the servlel orjSl' tbul'll take over. 



ftequestDispstcfier 



fofwarflServletRequest, SmtetResponstf 
inctutietSmtetRetiuesl. ServlelRespcr&e} 



javax.servletl 



Getting a Request Dispatcher from a Serv let Request 

Request-. dispatcher view request. getRequestPi spatcher ( 

The gBlReqjB5tD*5palchefl) method in ServlBtRaquesl takes a String path 
for Ihe resource to which you re /awarding the request H lbs path starts with 
a forward slash f"i") 1ho Container sees that as starting trcTi :hc- roc: :hi; 
web app' If ihe path floes NOT start with a forward slash, its considered 
i^ajivr? to Ihe original request But you can'f try to trie* the Container into 
looking outside Die currenl web app. In other words, just because you have 
lots of / 1 f doesnl mean it'll work if it fakes you past ihe foot of your 
current web app! 



•result. jsp*> ; 

/TV , 

^^^^^ 



Getting a Reque&rDispatcher from a ServletContex t 

Requ&atDispatcheii: view = getServletCc-ntiixr: . ajetReLJuestDiupitiher •( "/^sulc. j ap" 1 > 



Like Mie equivalent me'hod in ServlelRequest. Ihe getReq^estDiSpslcteri.i 
method lakes a String path for the resource to which you're forwarding ttie 
request. EXCEPT you caranof specify a path refetwe to the cunenl resouroe \ he 
one that received ttiu reque*1j That -^eani you musl start tha path wtfrt a 
forward stesfrf 



V* MUST we the 

^etKe^eitUis^jtfihevCJ 
method *f £a-*lctC*d**t 



Calling forward!) on a Request Dispatcher 

view . forward (request, response) r 

Simple The RequestDispatcher you got from your context or requesi knov^ the 
resource yoj re forwarding to— Ihe resource (serglet. JSP) you passed as Ihe 
argument to getRequestDspatcheii) So you're saying. 'Hey. RequestDispatchef 
please Forward this request tn the thing I told ycu abojt earker (in this case, a 
JSPf. when I first got you. And here's Ihe request and response, because that 
naw thing is going to maad Ifoem in ureter to finish handing the request" 
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What's wrong with this code? 

What da you think? (Jus ftraae&Dtipji&btFi code 
Iftoh like ii will work the way you'd expect? 

public void doGet (HttpServletFequest request, RttpServletResponse response) 

throws TOEJteepticin, SerVletEMcept Ipft { 

response. setContent Type ("application/] ar") ? 

ServletContext ctx - getServletConteXt ( ) ; 
Input St re am is = ctx.aetP.esourceAsStreani ( "bookCode . jar"> ; 1 
tot rtad = 0; > Aisw* tint all 

byteTl bytes = new byte [ 1024] | \ thi, works 

OutputSt re^tn as - response. getoutputstreamo ; 
while ( (read = is, read (by tea)) 1= -1) | 
os. write (bytes, Q« read J j 

I 

OH , flQSh 0 J 

fte quest Dispatcher view = request . qetflequesttiispatcher ("result. nap"} f 
view. forward (request, response) j 

us. close () f 

i 




You'll get a big, fat Mega IStateExcept ion! 




You can't forward the request 
if you've already cum mi tied 



And by -commttsd a response" we mean. ***** 
t spnL to (ta eta*'. Look at If* code as" ™ * 



OSr fl.vLBb() .' 

Thai's tto *» ft* C*»M M» ^BSSg^S? 

^^SS^ ** * 000 s ™ 

il this. 

fhaf fwwartf a naausSi d^TER a response is asm. 



0* 

Kow come you didn't talk about the 
RequestDispahher included method? 

A: 

i\ It's not on the exam, for one thing. For 
another, we already mentioned that it's not 
used much in the real world. But to satisfy 
your curiosity, the include () method ssfids tin* 
request to something else (typically another 

Ml V let) lu du svliis: WUF*. itpjJ tfoft iwiicj ijutfc 

to the sender/ In other words, included means 
asking for help in handling the request, but 
it's not a complete hand- off, It's a temporary, 
rather than permanent transfer of control. With 
forward!), you're saying, That's tt, I'm not do 
ing nnythincj else to process this request and 
rehouse." Bui wi'lli iik ludf>(5, you're say in q, 
"I want someone else to do some things with 
the request and/or response, but when they're 
done, I want to finish handling the request and 
response tnyidf (although I might decide to do 
another include or forward after that..."). 
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listener exercise answers 




Remembering the Listeners 

answers 



Attribute listeners 




Other life cycle listeners 


£erwtetRe<^«tLittener 

HttpSeKion&ihdin^Liltener 

WJ-i-r,C», c A 'A ill ' --■ 
rtttf SCSSIDni'lit.ivat'CmC-IStCW^ 


Methods in all 
attribute listeners 
(except binding listener) 




Ufecycle events 
related to sessions 
(excluding attribute- 
related events) 


when -fcVie lewion it treated, and *he* iti destroyed 
ie»w*CreattdO 

. -—^ in X."^ 


LifecycJe events 
related to requests 
(excluding attribute* 
ml a ted events) 


wheh -the revest it iw-baWd or deitr*yed 


Life cycle events 
related to servlet 
context (excluding 
altn&ute rclaloa cventb) 

203 chapter 5 


*her, tte content u .n&aLwd or destroyed 

tonteKtlhi-tijIizidO 

tomtei*tDe*troyedO 



attributes and listeners 



Attribute Scope 

ANSWERS 





Accessibility 

(who can see it) 


Scope 

(how long does it live} 


What it's good for 


Context 

WOT thread-iaf e') 


Any part of the web *pp 
ServletConteKtLirtiners, 

Ser«lriC*.t«*tWt-ibute- 


Lifetime of the 
EcwIetContext, which 
means life of the deployed 
app. ff ierver or app joe* 
down, the Content u 

destroyed (aU^ with .ti 
attributes)- 


Resources you want the 

entn-e application to 
share, include database 

Connections, JNDI lookup 
names, email addressee .. etc. 


HttpSession 

WOT thread-safe') 


Any JOrvlet * JSP with 
ss to this particular 
session. Remember, a session 
e*tend* beyond a iingle client 

request \jo *p3n multiple 
requests by the Un( client, 
which toJd y> to different 
servfets 


The life of the teuton- f\ 
session ean be destroyed 

■ i t«i Smn ..V iCjIly or ,';„, 

simply bi«i-ovt f We'll 
^o mto the details <n 
the Session Manayment 
chapter) 


Data ir.6 resources related 

to thii client's Wiion, 

not just a single request 
Something that requires an 

otv^onuj Conversation with 

the client A shofpmj £ a*t 
a a typical example 


Request 

(Thread- safe) 


fay part of the application 
that ha* direct accea to the 
RjALijst object- Thst !»(*t!y 
-il^s onfy the Sewleti 
ird OSPs to which the 
revest ft forwarded usin^ 
a Re^KttDiipatehef. Alio 
Request-related ti*tene«. 


The life of the Revest, 
which meant until the 
Servlet * serviceC? method 
Complete*- In other words, 
for the life of the thread 
(stack) handling th,s 
request 


Passing model Ihfe from 

the Controller to the view 

or any other data wecif it 

t i ■ 

to a iiMjfe thent revert 
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code magnets answers 




Not use* 




<i*it-pJri»L> is *s«J -for ifrvld: inrl 
parameter*] Fi*t terni-crt imt parameter*- 
£nd <i rut-fir J*> ONLY inJide a 

<«r*let> efei**rt; 

Ikt't ho iuth tkmg as <«rv|et~para»>. 
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'Mode &%faH @£&fit&l 5 



W!n ii uniiig a RequestDispatcher. the Use of which methods tan ofhiij |e«d 
| to m IllegalstateExceptioti.' (Cboost ali that jipj>ly T ] 

□ A. read 

□ [i. flush 

□ C. write 

Q 1 >. getOutputStreara 

□ E. getRes our cc AsS t r c am 



WHh I i statements about EervletCutiteXt iuitm Ligation parameter* Src Inic? 
2 (Choose all that apply) 

□ A, Tiny ihmiid be u*ed for data thai 

ci&figtt! rarely. 

□ H. They should be used tin data dial 

change* frequently, 

Q (I. Tin - * Cflfl iu-i-i-i-ii'il using 

servletcontext - get Parameter (String) 

□ 1). They can ho nt^tsed using 

Ser vletContext - getlni tParame te r ( S tr ing ) 

O I-;. Tin-} hhnnkl be used for data thai \s specif* 
i<> >i p.irtkukir sctvlci 

Q 1'' Tlici, ItrmntfJ hr IRand fin' lintn thn\ it miiilir:ll ill' 
Id .hi ■ iiliv.- urb ;iHnn. 
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Which type* <itefide Ihs method* getAttribute ( ) ;unl setAt tribute 0 ' 
(Choose .ill lhat ripply | 

□ ft, ServletRequest 

□ C. ServletResponse 

□ II servletC on text 

□ K. ServletConfig 

□ I SessionConfig 



[f a srrvlci is bivok«3 urning 1 1 ■ ■- forward"! include method of 
RequestDispatcher.. which methods of iln- sccytetlj hequ<s*l objrrl can acre** 
the request attributes set by the auilLiintT? (Chou*B all that apply,; 

□ A, getCookiesH 

□ li. getAttribute < ) 

□ s: getRequeatPath ( ) 

G D. getRequestAttribute ( ) 

□ I'.. getRequestDispatcher ( J 



Whi'h i [Hi i\\i.\r mil Hi inni i' 'ii nUnul initialization parnmciiTS lha( are 
applicable to .in entire web application? (trapse all thai apply.) 

i 1 1 1 J"' - ■ J - J. . . . - 

u iv set viBtvwiiLuy , ycL±iii trdiiULm ^t?ia ^ j 

LI IS. ServletContext .getlnit Parameters (} 

□ ( ! , servletconflg . getlni tParameterNames ( ) 
Q I). servletcontext.getlnitParaiJietetNames 0 

□ K. ServletConfig. getlnitParameter (String) 

□ V- ServletContext. getlnitPararaeter (String) 
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Which siak-mi-nt* about listt-nn-. are tfttf? (Cbflndm; all thai apply.) 

□ A. .\ ServletResponseListener i-.iii l>. ljhh-cI l< i perform an aftfofH 

when ti scrvtcl IV-fpiuiM- Ikim !><;< ii 3 ■ t _ 

^ U, Am HttpSess ionListener [ ,)ti In* used In perforin :ni an if in when 
in i HttpSesaion lias timrd out- 

□ c;. a Servletconte^tiistener rim he o£e& to pferferrft an action 

when (lie Hcrvlcl COOtCXI i^ aboul he dull down, 

Q I). A servletReqiiestAttributeListener i :in he used Ld 

perforin an action when an attribute has been removed from a 
Servl etfteques t . 

Q [■'.. A ServletContextAttributeListener <-an be used to perform 
an action when the scrvlrt context just been created and is 
available to service its first rcquc-M. 



Which is moM ktgfcftlly tlM!bd ;ts an allribuie in st-sdon scope-? 
G y\ r A copy of a qiw:r} ptttftnteKr entered by a utte& 

Q B, The lesull fit .1 database query to be returned 
immediately tu Li user 

□ €1, A database L'Qnneetion object ased by all web 

i pmponcnts i >)' die syttem. 

Q An ohjiTi representing 11 user whit Ims just ing^cd intci 
I In- system. 

□ \l, A copy of an initialization parameter retrieved born a 

servletcont&xt object 
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Given [his code from an otherwise valid HttpSexvlet thai lias also been 
n.-|JtiM(T4 , [l lis ;i ServletltequastAttributeListener: 

io T public voia aose t ( Rt tpse fv tsequ,e S t req, 

HttpServletResponse res) 

11. throws IQException, ServletException { 

12. r eq . se tA 1 1 z ibute ( " a" , " b " } ; 

13. req . setAt tribute T a" ., " c " } ; 

14. r eq _ r emo veA t tr ibu ta ( " a" ) ; 

15. } 

16. public void a t tr LbuteAdded t set vie tfleque $ tA ttr ibu teE vent ev) { 

17. Sy^t^e^l.out,priat( ,,, A:" + ev,getName ( ) + h *->" + ev . getValue ( ) ) ; 

ia. j 

19. public void attriJ^teRjcmovedtServlctSjcqucstAttributQEvGnt ov) { 

20. System .out. print (" H: " + ev . geOJarsa () + ™->" + ev. gatValue {) ) ; 

21. ) 

22. public void attxibuteKeplaced (servletRequestAttributeEvent ev) [ 

23. sy stem. out. print f" fe" + ev . getHame () + + ev, getvalue ; 
24 . I 

Whin I»mj?i>k imtput is generated? 

□ V A:a->b P : a->b 

□ B A:a->b Ma->c 

□ C, A: a->b P ; a->b M: a->c 

□ I ) A: a->b P : a->b P : a->null 

□ I. A:a->b M:a->b A:a->c M:a->c 

□ K A;a->b Mra->b A; a->c P;a->null 



Q When declaring » listener in iln j ~DD, which -rub-ckmcnw of ilir <listener> 

* r k-mrnl ur<- rrquirrejy (Cht>O*0 all Unit itjjplv.l 

□ A. <description> 
G M <listener-r.ame> 

□ C <lxstener-type> 
L) M. <listener-cjass> 
O I-! <servlGt-ma,ppiiig> 



214 cfiaprerS 



attributes and listeners 



|Q Which lyprs of objects can store attributes? (Choose all that apply,! 

□ V ServLetCoiifLg 

□ !'-. ServletResponse 
Q C L RequestDispatcher 

□ I), FtttpsetvietRequest 
Q Iv Httpsessioncotttejtt 



Which bLfc U'uv.' Choose <ill that apply,) 

G A, When ;i web application i> prcpating to ihtitdQwn, iIip order 
u| li,i,-it«T luitincalioD is t$Q* guaranteed. 

□ B, When likelier-friendly events occur, lisAenef mv&catfeo ordi i 

is in il jtvi'dirml i|r , 

G (.'. rhe COlttatQei rr(ri*lcrs listener? basset OQ declar/ftliatii in the 
dcplojTiterLt descriptor. 

□ I). Only ilif container cstil invalidate a Beainon, 



VVfiich itaternentt about RequestDispatcher are trut (where applicable, 
.i^Miin' i Sir' RequestDispatcher u.is nel obtained vis a call to 
getWamedDispatcher () J [Chocftc tdl that apply:) 

□ A. A BequestDispatcher <.an he tiaed t<t forward a re-quoM in another 
setvlci. 

I_l ft. The only method in I lie P.«qua b tDicpatchot ntfjcirftusfe Ei 
forward ( S . 

rlers Specified in the query string used to create .1 
RequestDispatcher ore not forwarded hv the forward (} method. 

D. The servlel to which a request is forwarded may access the 
turijnmil query string by calling getQueryStringO on the 
HttpServletRe quest. 

Q E. The- servlel to which a request is forwarded may access the original 

query steins; by calling getAttribute ("javax. servLet. forward. 
quGry_string") mm tin' ServlotRequcst. 
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What is the recommended way 10 deal with scrvlcts and thread »at*ty? 
Q A. Write the acrvlct code Em extend ThreadSaf eServlet, 
Q B, Have live servlet implement SingleThreadModel. 
^ G, Log all iwrvJct method calls. 

G I J. Usr Ineal variables exclusively, and iJ' you have to uw instance 
variables, synchronize access to thcin. 



Given the foUowing methods: 

- getContextPath 

- getAt tribute 

Match the method* above to the following cla&« or intrrfai-t'*. [Mute that <h<Ii method can 

In- Used nmrr- ill ill] nrn r, 
HttpSession 

h ■ T P P P P IF IF P P P P P P FT 

sstvletContext 

HttpServletRequest , rrr . 



Wrijili.m Li tie uIhum ili> Rcquc stDi spat ch« r im t rim t-? ( :Lu»»e all 
that BOttlW.) 

•J A. Of its two methods, forward {) t> used most Irrqurnily- 

G B li-. methods lake the following arguments: a resource, a request, 
and a respon se. 

O C Ueptriidiny on the class whose method creates a 

RaqiieatDlspatcher, ilie Ljaih tti (he resource Kibe forwarded 
m will change, 

Q I J. U.i^mdle.ss; of the class whose method creates a 

RjBcriiestDispatchor, the path Co the resource tti be lomarded 
in will Nf)T change. 

Q F,. If ymir service Invokes RequestDispatcher. forward., h 

ma send iis own response i«> the dkmt before, bin nol after the 
invocation of forward. 
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\\'\wn Lhiii" a ReguestDispa tcher. the Use of which methods tun Dfhfcij lead 

t to im IllegalstateException: 1 [ClitiO^: Mini apply,) [t^^let ' 

□ A. read 

13 11. flush tlleyl£-btet*teftii* U ta*jed 

(■ write wr,c* a resets has already teen 

LI 1 > getOutputStrearo me fcW dot* t^aU and the* fo* 

□ E. getRes our ccAsStr earn atten^ a forward 



Which statements about Servle tCcmteXt iiiili;iLi/ali^n piiru.riickT& arc Irue? 

(Chouse all lhat apply.) (Servttt ^ * 

0 ,\, They ihould foe used for data th&t 

thmmet rarrlv. _ . , 

,-1 -Option B 's iiNCorrett beMH« 

U H. I i,n shmilrl In- used for dsta thai £pvletC**te*t mrtfar.an.etm are 

chAftgM rrr<|ur-ntly. ^ rc4 d at CW*** startup «*t 

□ C. Tin-; ran h, iU -r,.«,.,l „s,„, Q . c i4 w£o ^ £t 

servletcontext . getParamster (String) betawt ihU mcIW 

^ 1). They can ho noffssed using d«s n#t enist- 

Ser vletContext - getlnd tParame te r ( 5 tr ing ) 

□ E. They hIikuUI I* used l<n <!;<U dial is (pedfic -CfW E is inCon-tit betake 

id n pnriiLiilLir iCtvhU t«« is only one £«rvletCchte*t 

^ K Tfcw a„.iilr-l In- r... rfc,tn lhat Iv object per *eb application 

- ■ r - ■ ' ....... - - - - - ■ - ■ ■ - ■ ' - . - - ■ . - ■ - - — F~l"'~~ ■-- -j" - - 

Id .mi ■ iiliv.- ui'h ;iHi.rj. 
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Wbkh types <lrlW ilir [it'iIukK getAt tribute (> .mil setAttribute (} ; 

m»4 $ (g „^ w- & * ™ 

EL A, Http$»s»10n 



3 



fi. ServletRequest 

□ ('.. ServlstReapoBse 
Sttf I). ServletContext 

□ K- ServlatCemfig 

□ I . SessionConfig 



[f h servlcl u bivok«j umiifg iLr forward "i include iwihot.1 nf 
Request!) ispatcher. which mrthfids of (he scrvkt'i hequesil objcri can accent 
the request attribute id by the Container? (Choose .ill thnt apply,; 



□ A. 

□ a 

□ D. 

J K 



get Cookies 



ge tRe que 3 1 Pa, t h 
ge t Re que s tA 1 1 r ibu t e 
getRequestDispataher 



B is the tantlt t*eb«Hi 

vfitfc tt w* tan attes* fck w*** 

java* «*-vlct i*^li*oe attributes 
-tykori C and D re-rer to 

method j that de*'t 



Which calls provide Suloi mutifin iibnul initialization parameters llial ;»t (£er^et v2-^ 
applicable to an entire web application? {Uiomc all thai apply.) 

r I 1 I™ 1 -M-r> Jt^j. ju.^T'biiLn-, HI 

<arf ;\, dClVieb^VUli^ ■ \mA.HA. ^tidLlcULIC WIS \ j 

LI It. ServletCcmtext , getlni tParame te r s ( ) 

servletconiig . getlnitParaineterNames { ) 
servletcontext . get mi tParaaeterNattes ( > 
Servle tConjBg . getlnitParameter (String) 
Servletcontext getlnatParajseter (String) 



3 i 



beMuse tWe« methods do not ejust- 



-0pt(*n5 C dhd E are in£orrett betiuse 
they provide J££e» b> servlet-spetif ie 
■ubaliiJtioh parameters 
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attributes snd listeners 



Which statement* about Ifeterteti are tfttf? (Choose all thai apply.) 

□ A- A ServletResponseListener cjiii he used m perform an action 
when ti scrvicl response Im* bc<rt Kilt* 

3 ft. Am HttpSe S3 ionLi s tener can fw* used In ijerfnrtn lit] w\iim when 
in i HttpSesaion lias timed out- 

( !. A Servle tC on tax tlx s tener e«H tie uieiJj hi p*rE>rrft an action 
when the tcrvlet COOtCXI about lo he RtlUl down, 

U O, A servletReqiiastAttributeListener i :in he used to 

perforin an action when an attribute has been removed from it 
Servl etfteques t . 

Q fv A servletcontaxtAttributeListener i ;m be used to- perform 
an action when the scrvlct context hasjti$t been created and is 
aVailobte tcp service its first request 



bctiuse tKcse i» "* 
interface 



-Opt**, £ ii 
would be wed for this 



Which is mosl logically stored its an attribute in <i***ioii scope? 



A r A Copy of B query parameter mitred liy a user. ^-^meter 



LI li. The reiufl fit ,i database query En be returned 
itiiitji'tSLiit'ly tu j user 

□ €J, A database connection object nw.d by all Web 
i pmpoRents i >)' the syttem. 



-toti™ B « ir4errftt btW«* 

dab it tyf-talK/ ettfcw i*«e*«»¥ 

~()ption C is ihCorrett betJuse fiinte it 
ii wt Sfe£i-fi£ to i paHitMliir u ,,.^ ^ 
ihwld be itored in iwte*t Jiepe 



I). An object representing a user whu hns just fogged into 
llii- system. 



□ E, A copy of an initialization parameter retrieved from a -Ofbor, £ « tftiorrett heduit s let 
ServletContext object. te*it*i par^tteri swy "£ztV£ 

tbe SerrfetCnte** object- f 
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modt answers 



_ Glwd tliis code from ah odrerwise valid HttpServlet iluit has »lsr> been liP^ 1 ^ 1 - 
0 nfpMcn'tl .is :i ServletRequestAttributeListener: 

10. public void cloGfit tut tpservie Request req, 

HttpServletResponse res) 

11. throws IQException, ServletException { 

12. r eq . se tA 1 1 z ibute ( " a" , "b " } : 

13. r eq . so tAt tribute a" , " c " > ; 

14. r eq _ r emo veA t tr ibu ta ( " a" ) ; 

15. } 

1 &. public void a t tr LbuteAdded t set vie tfleque $ tA ttr ibu teEvent ev) I 
17. Sy 3 tera . ou t . pr i tu t ( u A:" + ev,getName() + h *->" + ev . getValue ( ) ) ; 

10. J 

19-. public void attriJDniteRjcm-oved (ServlctHjcqucstAttrlbutaBvent ov) { 

20. Sy stem, out. print (" M: " + ev . getNama ( ) + "->" + ev. gatValueU) ; 

21. ) 

22. public void attributeKeplaced (servletfcequestAttributeEvent ev) [ 

23. system. out. print (" p : " + ev . getHame () + "-> fr + ev, getvalue t) ) ; 

24. J 

Whin rmtput is generated? 

□ ,\, A: a->t> P : a->b 

□ M. A:a->b M:a->c 

□ I ! A: a->b P : a->b P : a->null «aLe *f £i* itfcnfcute if 

□ E A: a->b M; a->b At a->c M : a->c 

□ K A;a->b M;a->b A a->C P;a->null 



WIu'm declaring a Keener in iln- T)D, which srub^lcrncnw of the <iistenar> lett"* 1 ' 

f lemr nl are requin-il? iCUntw all lliiil ,tppl\..l . « j 

□ A <description> 
G M <listener-name> 

□ t .. <listener-type> 

a^ll <listener-class> -The <lirto*r-tU«> swV»-^l«™<n-b i» 

n l ^ , , _ ^ il>£ ONLY reared s-b-tle*** 
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attributes and listeners 



Which tjFpteB of objects etui more attributes? fChiafine ell ihnt appt).] 

□ V ServletConfig ^ ft & ^ C ^ 

□ IV ServletResponse JfjA tew*™ *>ff« 60 ^ ^ ^ U> 

□ t!. RequestDispatcher start attribute- ty^i reMed servletii 

U ]). rfttpservletReguest tte *tlritot» 

.-, -j, e art nttfSeJueir and 

LI B, BttpSessionContext -Vfbtm b \t invalid became £er*leiConte*t 

there n no suih type 



Which an? true? (Chopfte all ihai apply.] 

Ll A. VVbfcn ;< web ^pplicHtUin i> prcpattng in slnndmvn, the order --O^tioni ^ and B ^ c 

ul li, inter rmtif'uiilioil U not cjuanirUeed. mio*r«£t betauM the 

□ 11. Wticu lMrriH-J'rinnll\ .-\rni> «mir. limner ii»v<»raiion Offer j°l^^ ( t"e 

ZJ C, Tlit; combiner registers I isifjj c r 4 based I'll decbtraiiotii in Ute 
deployment descriptor. 

□ 1). ( )nU ihf t-[nU;iiilfr r;lii Tiivjilidiilr :i .ehsiiiii. -Ofiiot* D is interred; became a 

ie™let tj B invalidate J mki<« 

&t Ktt f £r»i (n ,,nvalid,*tef) method. 



VVliirli statements about RequestEHspatchex are inic (where 
applicable, attune the Reques tDispatcher ivas mn obtained via ;i 1 
to getNamedDispatcherU |? (Choose all that apply. I 

E) A A RequestDispatcher can be used to forward a ncqm-M n, 
■•mother scrvler. 

Ll B. The only method in the ReqiKistDispatehcr iuirjj.uf is 
torwardu . 

Ll CJ, Pnrnnirlcr.s specified i n the query stritiff used to Create a 

RequestDispatc'hez tire pot forwarded by the forward () 
11 1 1 ■ l Uod . 

□ I). The servki m xihii h .1 ri-ipiKst is forwarded may access tfce 
ftrightal query Mrin» \>\ 1 = 1 1 1 i 1 1 -4 getQueryString (} on ihe 
Httpserv 1 etReques t. 

K, The si-n lei t<> which a request is forwarded may aecest the 
original query string In iiilhnu getAttribute{";javax. 
servlet, forvatd. query_string") >n ihc 
ServletRequest 



all 



-0ptron B is intorrefrfc 

contains a* mdwie method 

-Afton C n intorredt 
becauu jy>ih f jr*-ften 
Jr< +orv«ar£|(fd in tfr, 

-Cftion D is interred: be^u&e 
W> method retnirw the ^t.ery 
*tiri«o« th c WJ^L pattern fr'^ 
tKe ^««|«jU)iipakher- 
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mock answers 



What is ihe recommended way lo deal with servfots and thread sal'riy .' (Ser^^ *?* t V 

□ A. Write tin- *«rvfcl ets$# to estend ThrsadSafeServlet _0jtooh A & *I e ^""l^ 

□ 11. Have the servlei implement SingleThreadModeL ^U^er^KAPI 

□ C. Lug all serdw method calls. jjjjj ^ i^leTKrtadMotW if 

D D. Use local variables exclusively, and il' Jim have to use inittaace depre^kd * vcrtian 
variables, synchronize access lo tlicm. *tot M^MrtWtWW* 1 



14 



Given the following methods: 

- getCookies 

- get Con text Path 

- getAttribute 

Match the methods above in die following classes or interface s. Note thai each method can 
be used more than once. 

H t tpSe s sion _ !£tA.i^*!?. 

ServletContext jEsfeSfc. S$^*g*#L 

fl t tpSe rvl e tRegue s t 

At tins f»ni tin shouldn't really jWt 
mcrron liter, ^ *«.£h a* afe«.t Wh*t »etWodj 
wwld mikt ter.it hi eath itoj* 

Which are true about the RaqneatDiapatchar totarfe? {t3i.ao*e all (APfl 
10 1 1 u i .i|i|>lyl 

[B A. Of its two methods, forward (} is used most frequently. 

It. lis method 1 ; take ihe following arguments: a resource, a reqtiesl, — (hfbtm B : tht res»r£* 
^ and a response. » »pet'rf led at objett 

KJ C Depend inc on tiie class whose method creates a ^^o^— - 

RoquestDispatcher. ihe path to the resource to be forwarded 
lo v, ill elmnne. 

Q 1). Regardless of the class whose me I hod create^ .i 

RcgucstDispatcriDr. ih. path lo i Sir- n-*iajnv to be forwarded 



io will NOT 



I'tlMII^l 



Q K- If your nervlcl invoke-, Request-Dispatcher . forward ii -Oftm £ ( £ , i t 

can Hriicl its own response to ilir dienl before, lull nol after ilic ulel i(l fl£ ^ e * 

EflVOi ation of forward. , b J, 
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Conversational state 




Web servers have no short-term memory. As soon as they 

send you a response, they forget who you are. The next time you make a 
request, they don't recognize you. In other words, they don't remember what 
you've requested in the past, and they don't remember whal they've senl you 
in response. Nothing. Sometimes that's fine. But sometimes you need to keep 




wouldn't work rT the client had to make all his choices and then checkout in a 
single request Yag ii find □ surprisingly simple solution in the Servlet API, 
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official Sun exam objectives 



Session Management 



Coverage Notes; 



4.1 Write serviet code to store objects into a 
session object and retrieve objects from a 
session object. 

4*2 Given a scenario describe the APIs used to 
access the session object, explain when the 
session obieel was created, and describe the 
mechanisms used to destroy the session object, 
and when I 



Ail jour oj fhf nam objeetiits or session 
mmifigrmtnt are (ovtifd fomp/tteh in this 
(Hupttt (fillnviiglr some of these Itjphs wert 
titttflirit ntl il) Ihr fifrvhtIS tittlfifrf}. TiiSS 

thttptet r.ww <uir ektuwt f« (t*rn <m<t 

wemurizr time tvpirs. s« Iftkr \nyr timr. 



4*3 Using session listeners, write code to respond to 
an event when an object is added to a session, 
and write code to respond to an event when a 
session object migrates from one VM to another. 

4.4 Given a scenario, describe which session 
management mechanism the Web container 
could employ, how cookies might be used to 
manage sessions, how URL rewriting might be 

used to manage sessions, and Write serviet cede 
to perform URL rewriting. 
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session management 



I want the beer asp 
to have a back and forth 
conversation with the client... 
wouldn't it be tool if The user 
Answers a question, and then the 
iveb <spp responds with a new 
question based on the answer 
to the previous ones? 



0 

o 




The model (the hiti>Ku 

kfc to figure cut whether it hii 

enough i»ifo*-™jtion ts njfa A 

r f to*»ehcUn:io* f in othe* 
to give jrfvite), a*d if it 
doesn't, it has to give ba«k the 
DtWt ^"tstiDB to Jilt the tiler 



Kim wants to keep client-specific 
state across multiple requests 

ttlghi ninv. 1 1 it - btttiEnf*) logic in the model 
dimply thtcltt (tie parameter fisora tfie request 
ami ^i\T« lnuk ,i rrspmsf iihe atiekr). Nobody 
in the app (ctinrnibcrs aayttting llun "''ill <ui with 
this client prior in thr current request. 

What he has NOW: 

public class BeerExpert ( 

public Ar ray Li at get Brands (String color) 
ArrayList brands = new ArrayList { ) ; 
if ( color. equals ("amber "II [ 
brands .add. ("Jack Amber"), 1 
brands, add ("Fed Moose")? 
} else I 

brands. add("Jail Pale Ale" 1 ; 
brands. add ("Gout Stout") 1 



I 

return brands t 



I 



uVe the A 

(t«Aor> a«d tf* bat * 

t»i y$ iB,aTt 

j(Jvi(e- - 



What he WANTS: 

public class Beersxpert ( 

public Hextfteaponse getAdvice (String answer) ( 
// Process client answer by looking at 
// ALL of the client's previous: .answers, as well 
// as the answer from the current request. 
// if there's enough info, return final advice, 
// else, return the next question to ask 



l 
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client conversation 



It's supposed to work like a REAL conversation... 
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session management 



How can be track the client's answers? 



Kind's cWign won't wort; uu less, ha pan keep iraek of fflifyftfill& 
the client lias already said during the converwtkmj not jus) ih< 
answer in 1 1 m ' txrrttil re<jue*i. He oefdi iln - st;]v|**i to get the 
rcqucsl parameter* representing the client'* chokes, stud save ii 
somewhere, liarh time die client Answers a question, die advice 
f miJ lit* uws fit! of that client's previous answerj let L-ome up with 
cither tinutlm question to ask, or a final recommendation. 

What nn l some options? 

Use a stateful session enterprise j a vabean 

Sure, lit* could tin that Hi' could have hU nervlel bet dine .1 
client tO <i rtatefu] session bran, mid each time a request cumes 
in he could locate that client"* ttatcfid liran. There arc n lot of 
Ixfdc issues to work out, but yes* )im can certainly use a smtiTuI 
session beau to .store conversational - 1 : ■ 1 ^ ■ . 

lint that's tt)|» too much overhead luverM/i lor thLs appl Besides, 
Kim"*. Imi-mli^ provider dot") 1 1 "1 bave ft l ull J 2 KB server with an 
|?jjB Container, Be** got TVmn-ai (a web Gontaitiei sad that-i it- 



Use a database 



g 



This would work too. His hosting provider rfwu allow access in 

\I\S< il .. m.i hr roltltl (in it. Hr EOUld Write ill'' dtent?3 data tif A 
database... hut lliis in nearly a* nuirh of a runlime |if rfortnaiice 
liil its an i'iiti-rpriiii L bran would ln\ p-i-sibb Ami nn\ in on- 
than he needs. 



Use an HttpSession 



Hut yon already knew that We can use an Http3«Bion object n 
hold ih*' rwmvrsalH mal statr across multiple reqia-sts. In Other 



(Actually, KJoi would Mill have 10 uie an 1-hcpttess.iuu even if be 

ffjjf ChOOK another option sllrh a* .1 [lalahasr or -session Ih'liu, 
Ut-i aUM- il (hi* client is a ivrb browser, Kirn ^rill needs to match 
a specific client with a specific database key or tctiuoa beau II >. 
and as you'll see in this chapter, the HttpSession takes rare of 
that identification.) 



An HitpSessio* 1 objeel can 
hold conversational State 
across multiple revests 
irom same client. 

In other words, it persists 
For an entire session with 
a Specific client. 

We can use it to store 

'wei 
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sessions in action 



How sessions work 



Diane selects "bark" 
and hits the submit 
button. 



The Container sends The 
request to a new thread of 
the BeerApp servlet 




The BeerApp thread finds the 
session associated with Diane, and 
stores her choice- ("Dark") in the 
session as <j.i c*tnoutc 



Attnbute{) 




The serylet runs its business logic (including 
calls to the model) and returns a response... in 
this ease another question. "Wnat p"i;e range?" 




biane considers the new 
question on the page, 
selects "Expensive" end 
hits the submit button. 




The Conmincr sends the, 
request to a mw thread of 
the BeerApp servtet 



Web Container 



^^^^ 



The Bse^App thread 1 finds 
the session associated with 
Diane, and stores her new 
choice ("Expensive") in the 
session as an attribute. 



set Attributed , 
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session management 



The servlet runs its business logic 
(including colli to the model} and 
returns a response... . in this case 
another question. 




Q 



Meanwhile, imagine ANOTHER client goes to the beer site... 



Diane's session is still 
active, but meanwhile 
Terri selects "Pale" und 
hits the submit button. 



The Container sends terri's 
request To o new Thread of 
the BeerApp servlet 



The EetMpp thread starts 
a new Session for Terri, and 
calls set Attn buteQ to store 
her choice ("Pale"). 





\fe d<m'h Tew i»A 

P^irf'i WHtrt mined vp 

ei tS i*td tVwtfr am 





DHforani client 

Same servlet 
Dilfetwit request 
rwfenwif (breed 
Diffensflf ! 
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recognizing tits niienx 



One problem,., how does the Container 
know who the client is? 



TJir HTTP protocol uses iiattitss comiecdori*. Tin" clietti 
hrws«T ninkcs .1 COtUttictiotl to (lie srrver, KQiit the rrqumt. 
grts the response, and closes the connection. In other words, 
the connection exists for only a singir request/response, 

BeatUSt ill connections: don't persist. lh<- <.:<itil/iiner doesn't 
recognize lluit the clieni nuking .1 M-cund request is. l]ie same 

client (Von; a prevwul request .Ys far a* the dontaihef'i 

H oncenti'il, rnfh refpifst in fnnti a Hew rlifttt. 






Why rsin't thp fnnrjiinf r jn<;t MtF> thf IP jiddrp>;i nf 

the client? it's part of the request, right? 



0= 

Well thpn hnw nhniil iFninty Infn? If thp mpr 

is logged in, And the connection it secure (HTTPS), the 
CsMlaissr fcns™ EXACTLY whs the iiisnt ! 



is, 1 lym; 



Oh , t lie Container con g et the I P addt os s of the 
request, but does that uniquety ld«nrify the client? ir you're 
inn <i toctil IP outwork, yi'JU have a unique IP address, but 
chances are, that's not the IP address the outside world 
sees. To the server, your IP -address is the address of the 
router, so you have the same IP address as everybody else 
o\i that network! So that wouldn't help- Vou'd have the 
same problem the stuff Jim puts in his shopping cart 
might end Up in Pradeep 1 (hM. rirul viti' vf r ,d. So n<j IP 
address isn't a solution tor uniquely identifying a specific 
» mt^rn^i- 



jf"J_ Yes, if the user is logged in and the connection is 
secure, the Container can identify the client and associate 
him with a session. But that's a big if. Most good web site 
design says, 'don't force the user to log in untfl It really 
matters, and don't switch on security (HTTPS) until it really 
matters." If your users are just browsing, even if they're 
adding items to a shopping cart, you probably don't 
want the overhead (for you or the user) of having them 
authenticate to the system until they decide to checkout! 
So, we need a mechanism to link a client to a session that 
doesn't require a securely authenticated client. (We'll go 
into security details in the... wait for it... Security chapter,) 
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session management 



The client needs a unique session IP 

'Mie uii-.H h 7iilii|ili-: <m 1 1 j ■ i Ik'nT- [b£I ri*e|Uffct, ihc t !i HH iiiitcr 

generates a unique st^ion ID ;nnl ni ii l>;uk in she clienl 
With lIk- wiponse. Tfrp ctiettt sends bark the xessinn ID 
with f-ar-h subsequent request, T!ic Container sees the 
ID, lindu the matching session, and associates (he session with 
the request. 




Container 
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(fie joy of Cookies 

How do the Client and Container 
exchange Session IP info? 

Soniclitm, ihc I limliiiurr Ii;ih <'« gri the si-swiii [D In lite 
client m par! uJ' tlic rrs[.nmsi\ and ilic i \v.w in send hack 
the session II) .is pjri of the request. Thr simplest and tnptt 
common way tn exchange ihe info Ls through e&a&ei. 
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session management 



The best part: the Container does 
virtually all the cookie work! 

YOU ii« have [u le-ll (he Container thai vim want to i kmIc of use 
a. urssion, but the Container takes can." of yrnrnuiinr tin- session 
ED, i reaiing a nnv Cookie object, smiling the .session II) into the 
1 imkie, iuid selling the cookie as part ni' the response. And on 
subsequent rojiiesb,, the t.'i miamio ftets the session ID from uinnkii 
in i he request, matches die Je**it>n in with an existing session, and 
jissiH inii'H ili.ii st-ssinjii with the cumm recjueifc 

Sending a session cookie in the RESPONSE: . j w a tc**^ 

/ ^ *£ e STW ^Y^-i 

HttpSession session = BIB BB; <r a«d tV* <- p " ti ^ j„Jt ha« t° d° 

H * U " iMB ™ iiilil the ,„k aiW V~ 

That's it. Somewhere in your service method you aslc for a . , t mflrt -thjn 

session, and everything else happens automat k'dh. ^^fS^^ *** 

You don't make the new HttpScKion object vourself. t ! rti _ llh vokc <t rt< y e1 ^' 

V>u 1I011 1 Kt'iHTiiii' tin- unique session ID. y,,U ta« i£ 3 Diero 

You don't make ihe inw Cookie ohjrri. ^ "TT^Le tl'ient frCCE-PT 



V'ou don't associate the session II) with the coalcie. 

Sou don'l SCI the Cookie inm the response «l 
(under Ihc Srt-Coakis headen. 

All the rvvkie work happens behind the seenes/. 



Getting the session ID frem the REQUEST: 

Http Session session - HBBrBl IV^/ tt_ < 

Look faioiliar? Yet* h?» esnecy the same method used to genera k* Jrt CKis^ t^uon)"* ,.3 ^ 

Ihe session ID and rookie for ihe response! * £EM>/JV£J t **** 

IF (the request include * session ID cookie) fD-ZZ^i^f " y SE£ se *^-« 

find the session matching that ID ie^ 0fi ^ ^ .j> 

ELSE IF (dicrc's no *e**ion. ID cookie OR there's no i iLi rcnt 
session mittchiugr the Hessiun lit 

create n *<-ssion. 

Alt the eotifriV tA't>j-A ha f i jit' us behind the scenes. 
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cfiecftmg tor a new session 



What rf I want to know whether the session 
already existed or was just created? 

Good question. Tin 1 nn-:n>j rcqucit niHhtid, griSi-ssiim-'!, murm .1 gftiioti 
rtgarttten of trttfthrr tttrrrx 11 prr-cxhimg .wninn. Sitirt- you atmqyi gel an 
BttpScssiod instance bark frnm that medincl, die i»nly way Ui know if the 
session is new is id ask the session. 

public void doGet (HtfcpServ].etHe.ques;t request, Ht tpServletftesponse response) 

throws I OEx caption, ServletExeeption f 

response. setContentType ( v text /html") ; 
PrintWriter out = response. get Writer () ; 

out .prlntln ("test session attributes <b r >") / ,\ L __, a much no n.attt r 

X what 7 , , Wt jeaiop. 
HttpSessicn session - request. getSeasion () ; * sC ssic* w" (si V* 



session. isN ew ( ) ^ ^ r€I? " de<1 

With ieiS, °" ' y 

out ..print In ("This is a new session."); 
t else I 

out, print In ("Welcome back!"); 

I 

) 




You get a session by calling request.getSessionlh 



but i s that the only way to g et the s ess i 0 n ? Ca n't you get 
it from theServletOnteset? 

A: 

rou get a session trom the request object because— 
think about it — the session is identified by the request. 
When you call getSessionO on the Container you're saying, 
1 want a session for THIS client... either the session that 
matches the session ID this client sent, or a new one. But 
in either case, the ieaion a for the client a£sociated with this 
request." 

But there is another way that you can gel a session... from 
a session event object. Remember, a listener class isn't a 
servtet or JSP — it's just a class that wwnli id know about 
the events, For example, the listener might be an attribute 
trying to find out when it (the attribute object) was added 
to or removed from a session. 



The event-handling methods defined by the listener 
interfaces related to sessions take an argument of type 
HttpSessionEvent, or its subclass, HttpSessionBinding Event. 
And HttpSess ion Event has a getSessionQ method! 

ju, 11 yuu iiiiijiiziiie:iil tally lti liitt iuui i i i l <zp i cr-i 1 1 a l^f -i .ik_^z> 

related to sessions (we'll :je1 to that later in the chapter), 
you can access the session through the event handling 
callback methods. For example, this code is from a class 
that implements the HttpSessionListener interface: 

pubBc void sessionCreatedfHUpSessiofi Event evenly ( 
HttpSession session - event.getSessionO; 
IS evani handling code 

} 
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What if 1 want ONLY a pre-existing session? 

You might have a wteiiwio in which a servlet wants v& um <»nly a previously- 
i H Mii cI session. It rnighl noi make tteiue for the checkout servl»:i. for example, 
so sinri ;i f^rr session, 

Sr> thtrr's an rtvcrloaded gctSes»ion(boolcnn] method jusi fur-iliai purpose. FT 
Mm wain im wale ;i new senium, t;i!l gCtSmiorifFal^e), ;unl you'll gel 

■•-■i 1 1 < ' i null, or a pre-existing HtipSessioni 

The code below calls getSessiooffaW)* then icsis whether ihc return value was 
null. 11 il uins null, the code outputs a messafje and ihfst creates a new session. 



public void doGet (HttpServletRequest request, HE tpServletResponse lesponse) 

throve lOEieception, SarvletExeeption f 

response . set Con tent Type ("text/html *) ; 
PiintWriLer out = reepanBe.getWtttisi- < \ ; 
out .println ("test se5sions<br>") ; 

H'.tpS^siuti session = inquest. getSessio&< false,) ; t et»*-jj» ^ ^ ^ liMim 

H<* ~ *i fc«4 fcr **** ZZ** *** 
* iW«d) already a setfi« 
if ( 9e3S ion=nuU) ( (i^ie w-arj jetSe" 1 *" 

would NEVER reU» i*H3 

cut. print In ("no session was available"'!; 
out.printin ("makina ore..."); 

session = request ■ qetSeEsioci { ) ; ^ - nert we WW we're r-iki^ a new session 

| else ( 

out. println ("there was a session J") f 

I 



0: 

Isn't the code above just a stupid., inefficient way 
to do the same thing as the opposite page? In the end, 
you Still Created a new session. 

A; 

X*. Vol 're r ig ht The code above i s j u st fo r testing how 
the two different versions of getSassiont) work. Jn the real 
world, the only time you'd want to use getSession (false) is 
if you do NOT want to create a new session. If your goal is 
to create a new session, but still respond differently if you 
know this is a new {versus pre-existing) session, then use 
the no-arg getSessionO method, and simply ask the session 
if it's new using the HttpSession isN-ewO method. 



So it looks like getSessfon(true) is exactly the 
aa me a s: getS essi □ n( ) ... 

At 

XI Right again. Thf? no- arg version is a convenience 
for those times when you know that you always want a 
session, new or existing. The version I hat takes a boolean is 
useful when you know that you cfon'fwanta new session, 
or when the decision of whether to make a new session 
ha ppens at r u nt i m <? ( an d yo u'te pa ssing a va riable i n to th e 
getSession(somefioolean) method), 
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when cookies fail 



See... this dl sounds 
nice but, uh. NEWS FLASH- 
anybody with half a brain disables 
cookt^S- How do you do ifissiond 
if you can't use cookies' 5 



O 

Q 



You can do sessions even if the client 
doesn't accept cookies, but you have 
to do a little more work,.. 



Hrm'i ntnH-r ihrtt anybody with liall a brain disables 
cookies. In fad, most browsers do have cookies enabled, 
iind eVEfytJiingV uniidiTful. lint there's no gimrtttttee. 

If your app dtptsds on sessions, you need a difl'crcni w;iv 
irji' urn? cliem and Container to exchange session 11) into, 
l.ucky tat vim, the Container can handle- a riHtkic-rcrii'.Lin; 

dient, but it >;ik*s a little mot* effort from ym. 

II you usr Lhc scssimi code on die previous page*— cidling 
getSessionn on die request — the Container tries to use 
cookie;.. If rookks aren't enabled, it meant thr- diem 
will never Jfobi dn: Hesnton, In Other words, the fBtw&ttfe 

ixNewfj nwthfKl ivill always return fniff 



A client wftti uooki-B "™ 
■'Set Cookie" response headers 

beffe and sirens going off to tell you Wat yo" 6 
code, if you & N0T "™,J:Zn U earn that always rettmw 
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URL rewriting: something to fail back on 

IF the fitem won "i pake cookfe^ you can pw URL rewtitmg arahacfc 
up. Assuming yon do your pari ecsrrecd^ URL rewrJtfljg will nlumj i 
work i hi* diem won'l nire thai it's happening ;md won't 
do anything (o prcvcnl k. Rrrrtctobcf die gold is liir die 
client and Container to exchange Session ID info. Passing 
cookies back and Forth is die simp/tit way to exchange 
session IDs, but if you can't but llu II J in a un*kte, where 
can yon put it? URL rc-writine t&ket lii-e s^&iicJti 111 thatf bi 
the cookie and sticks ii right tttwo the cud nf every URL ih-u ouikh 
in to 



Imagine h wel> page where every link ha* ;i linle hit of extra info (the 
StSsitW ID; lacked onto ihe end of ihc URL, When the uses dicks 
thai "■enhanced'" lint, the rcqiicsi <>yr- in die Container with ihni 
extra hit on thu end. and the Container simply slripw olT the t'xlra 
part of the request URL and mt» it to find the matching sesxi-jn. 




l HTT m.i*igoo K 



^^l^ , ^fl* ^ - D ^ L ™ , '■ 1 



Hfc add the IP fc> tH* *- n «i 

il the W^Li i* tM HTML «* 



iKml: 




J 



.Jlnrt*l> 



TV swii™ IP <■«"■■•*• baik At "e*W iff" 
/ st^k ib tV* end of the Re^«i URL fTV* 




HTTP Request 



you are hpro » 237 



URL (^writing 



URL rewriting kicks to ONLY if cookies fail 

and ONLY if you fell the response to encode the URl 

l!' cookies don't wort, the ConLnintT fhJk back to LTRL rewriting, bifl oif 
if you've done ilit* extra work of encoding all the UkLs you send in the 
ttSpOJjgft II Vnll W.ml [he I 'i ml iiincr It) .ihv;tVs drl.illll U> using lookirs lii'sl. 
wiili URL rewriting only :is a Um resort; >oii can Pftkx, Th.u^ ,\.ni|\ how it 
work (rxtrpi for the firm time, bul wtr'U g« to ihat in a moment), But if you 
don'i explicitly encode your URLs. ;tnd the dic-m wont ticcepi cookies. 
Voir don't get to use sessions. If you do encode your ULILn, thcr Coiilnim i 
Will first attempt to uae cuokiei for fieasfep inanapfemenl, and tall back to L'RL 

rewriting only if the cookie Lipproadi I'.iik 

public void doGet (HttpSe/rvletRferquest request, WttpServletftespoitse. r^aponse) 

throws IOExce.pt ion 1 

response . s et Cont ent Type ( " text / html " ) i 

PrintWriter out = response. aetWriter [) ; ^oitm 
RttpSession session = request . gotSesstan j ) j ^^—--^^ ■ 

aut.printlfi ("^.htmlxbody^' 1 ' I ; 

a«t*prir.! i:i f-ca href-Y"" - response . eneode.rjRi < " /fleerTa s t . do" > t *\*->click me- '/a ••"} i 
out.println { M </body></html^") ; ^ ^ 



ij^f Wait a minute,,, how DOES the Container know 
that c«k ies a ren't wo rk ing ? At what poi n t d o es the 
Container decide to use URL rewriting? 

At 

_£\ A , eally dum b Ciwt*i r^i doe h Vt i:are w ti *t I i^r ^Ok- 
ies work or not — the dumb Container will always attempt 
tn ^i>nd the rooki* ANN Act UMI rewriting parh tinrm. own 
if cookies are working. But here's how a decent Container 

handles it: 

When the Contain c-j sees a call to oetiessionQ, and the 
Container didn't get a session ID with the client's request, 
the Container now knows that it must attempt to start a 
np w "ipssinn wil li I li^ i ! 1 1- r i - Al I l',r. poinl , 1 hf Co n t a i n ec 
doesn't know if cookies will work, so with this first response 
back to the client, it tries BOTH cookies and URL rewriting. 



Why ca n t it tr y cook ies fin t , and do LJRL rewrit- 
ing on the next response if it doesn't get hack a cnoMe? 



A; 

jti Remember, if the Container doesn't getd session ID 
from the client, the Container won't even KNOW that this is 
the next request from that client. The Container won't have 
any Way to know that it tried couki£>* the last time, and 
they didn't work. Remember, the ONLY way the Container 
can recognise that it has seen this client before is if the 
client sends a session IDI 

5o, when thcConldincI >ee> you call ic^util-y et Jti>iun(), 
and realizes it needs to start a new session with this client, 
the Container sends the response with both a "Set-Cookie" 
header for the session ID, arid the session ID appended to 
the URLs (assuming you used response.encodeUftLO). 

Now imagine (heoejff request from this- cilent — it will 
have the session ID appended to the request URL, but if 
the client accepts cookie*, the request will ALSO have a 
session ID cookie. When the servlet calls request.getSes- 
sion(), Ihe Container read* the session ID from (he request, 
finds the sesiion, and thinks to itself, "This client accepts 
cookies, so I can ignore the res ponse.en code URLQ calls. In 
the response, I'll send a cookie since I know that works, and 
there's no need for any URL rewriting, so I won't bother." 
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UHL rewriting works with semiRedirectO 



You might tiave a icerjitrto in wh'n-h you w,u redirect the 

requcsl tu s rliflt-n-in URL, Inn you Mill waal to use n ses^wi, 
Tlicrc'ji a spwin! URL encoding method pill (in thai: 

response , cncodcRcdirectURL ( " /Beer Test , do" ) 

What about all my static HTML pages.,, they are full of <a 
href> links- How do I dp URL rewriting en these static pages? 



X\ You ca n't! The on ly way to u&e URL rewri tin g i s if ALL the 
pages that are part of a session are dynamically- gene rated* You 
can't hard-code session ID's, obviously, since the ID doesn't exist 
until runtime. So, if you depend on sessions, you need UftL rewriting 
as a tail-back strategy. And since you need URL rewriting, you have 
Eti dyiuinkrilly n.- ... i .l> (lie UJW , in Ebb HTML ! Ami lli.H 

means you have Co process the HTML at runtime, 

Ves. thu is .i perfwlNMCe ' • ■ vuu muil thri-, vviv tdf»>fiillv 

about the places where sessions matter to your app, and whether 

spss ion", are f Nl" al 1<> have or rnprpfy yoobl lr.) havf. 



UKL rewriting is automatic... 
but onjy tf you eneock your 
URLs. YOU Kave to run all your* 
UKJjS through a method of the 
response object^encodelJRLO or 

Container does everything else. 



0- 

You si id that t & Use UflL rewriting, pages iriUit be 

dynamic ally -generated, sodoei this mean I can do it with JSPs? 



A: 

JT"JL Vesl You can do URL- rewriting in a JSP, and there's even a 
simple JSTL tag that makes it easy, <c:URL>, that you'll see when 
you get to the chapter on using custom tags, 



Is URL rewriting handled In a vendor- specific way? 



A: 

ii Ye j. URL rewriting rs handled in a vendor-specific way. Tom- 
cat uses a semicolon *f to append the extra info to the URL. Another 
vendor might use a comma or something ehe, And wMteTotncsl 
adds'jsesstonid^' in the rewritten USL, another vendor might ap- 
pend Only the session ID itself. Thf? point is, whatever the Container 
uses as the separator is recognized by the Container when a request 
comes in, So when the Container sees the separator that ir uses {in 
other words, the separator that it added during URL rewriting}, it 
knows that everything after that is "extra info" that the Container 
put thb?fe. In other words, the Container knows how to recognize 
and parse the estra stufT if (the Container} appended to the URL. 




URL encoding is 
handled by the 

Respond! 

r^n t rnmflf that the encodeURU) 
method js someaung you °? V° u( 
LnServlelRespcnsc object! Yw donl rafl 

session object. Just remind Y™^ mat 
URL encode is all about the response. 
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samebotys cfcrnff southing wrong, Vou shoo® neve ^ 

w ^ mm * 7ses ^ hefl£,er J " a ^ " " sp0 " e 

POST / sel eel fsei«tBeerTastejde HTTP/1 .1 
User-Agent: M.millai'5.0 

jSESSIONid 0AfrB6caDE4i5 ^ d» tW ft* suf ?c*ed be i header' 

fcJSTi* s^,*** ■ *m**vm ft 3 **** 

POST / se | e ct/ 5 fil e rtBeerT«t e ,do HTTP/1 .1 ffl ^ Wt ^» 

Cpnk'iet JSESSION1D=OAAB&CBDE41 5 

or upended to the end of a URL *s "extra fcftfci 
poSTftelecl/selertfcerTartfcdoyieSiion 



id=0AAB6CJJOE4l5*^ fa*** 1 * 



BULLET POINTS 

URL r wiling add s (he session ID lo tte end of all the URLs in the 
HTML lhat you write to die response. 

The session 10 men comes back with the request as 'extra' info at 



URL rewriting will happen automatically if cookies don't work with 
the client, but you have lo explicitly encode all of the URLs you 
write. 

To encode a URL call response encode URL(aStnng) 

out .print In (**<a href-'" 
+ response . encode URL ("/Beer Test, do") 

+ ""solicit tm</a>") i 

There s no way to get automatic URL rewriting with your static 
pages, so it you depend on sessions, you must use dynamicaily- 
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I REALLY don't wont a 
bunch of stale sessFoms sitting 



around rn my server 
up vaJyahle 



teh 



119 




(retting rid of sessions 



IflC rlirnt corner in, iUnrls a session, then rhango I mi 
mind and leasts the jite, Of the client comes in, starts a 
session, then het browser iTfi.she.s, Or the client mmes in. 
itartl 4 session, ami then compleu-s the sessioii hy iis:»kiii£ 
;i purchase (shopping tsirl check-iuii). Or lu-r <:<>ni|itiUT 

(.THSiheS, W'tmhrrr, 

The p.iim is. session object^ tSlke n-MHtri rs. Vfatl clnn'i 
Waal sessions In stk'k .iri>nncl lunger than nrccssnry, 
Uenicmlien tljc H TTP protocol dncsri't haw ajiy 
nicrhanism i'ur the server to knew thai the- client is flone. 
In dntrilnited appneation terms, I'm iJiusi- or ynu Eunilitti 
wiili them there's nn trtiuitg.)* 

But how itoe.s the ( <ntllailtt't' |i)f Mil) 1 uli' 11 'In 
elifTU Walked away? HOW [ln,,!( ''^ Conteilttrf in«c when 
Mm- i h. ii' - !.| •..*-,•>• cni^irrl; 1 Hon.- Jnes the Cnntainrr 
know itiwn Ji V so/!* '« nV^t'oy « xexsion? 



FLEX YOUR MIND 

What *ii ^ ^lrtil^ait#&- yuu (itrjJ the CoiiUtintfi) iniyht 
use to manage the number of sessions, and eliminate 
unneeded aesaiona? What are some possible waya 
in which the Container could tell that a session is no 
longer needed? 

Think about it. then look at the HttpSession API a few 
pages from now for clues. 



*Sc-me distributed aaps use leasing as a way for the server to Knew when 
a client is gone. The elienl gets a lease- from the server, and iter, must 
renew the tease at specified intervals to tell (he server thai toe client is 
5I1I I alive. If the clrents lease expires. Ibe server knows it can destroy any 
resources it was holding tor that chant 
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abandoned 



How we want it to work,., 

UVd 15k. Mi.- CiJiUiiiiu-i' tit reiogfllZfl when a HS&fafl has btten 
in;L( n\t' lor too long; ;,Tlt: ' dsswoy Ut« session. Of coarse we 
inigln have la fight ih«* Gonudoeir owe vvliai l<mg" really 
means; I* 2ii minutes ti h ► bag? An hour? A day? (Maybe tfaetc*s 
* way lor us to tell the Contain tor whal "too lung" is.) 



© Diane selects "Dark" 
and hits the submit 
button. 




$ 



The Container sends the 
request to a new thread of 
the BcerApp servlet. 



The Container makes a new ses- 
sion, m# 343. The -jsessionid" 

cookie is sent back to Diane in the 
response (not shown). 




Web Container* 



Diane vanishes, 
mysteriously. 




The Container does whatever 
Contamcrs do m their spare time 
(although there are probably 
plenty of other clients to service). 



0 




SenHetA 



Web Container 



The session started for Diane is still 
sitting There. . wairirg. . abandonee. 




Diane doesn't return. 
Minutes go by . 



n 



The Container checks the state of 
session # 343 and finds that na 
requests have come in with that 
session ID for 20 minutes, 



The Container says. "20 minutes 
is just too Song. She's not coming 
back," and destroys the poor, 
abandoned session. 




TV* 



Web Container 
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The HttpSession interface 

All v an? about when you cu\l gM&MmmQ h that 

you ^t*i an inncancc of ii class thai Dxipleinentj the 
Hii ^Session interface, It*s ilir GoiURintr's jiNb to 
(.Ti-air ilic implc-mcuuuimi. 

Oficc you linvc ;t srssifm, what can y«»u th with i<? 

Mm( o/ jA/> llW, )'fJII 7jf 1CAV KVSSIUIIK to get mid Si I 

sfusionsroped fitiiibntes- 

liul there's mur* 1 . ttf i-nurse. Sec ii' you can figure oul 

some of die kc> method* for j^uweJf (aawers we mi 
the ftejB page, <Wi turn t|t<- |>ag.-!i 



pen your pencil 




What it does 



What you'd use it for 



getCreadonTimeQ 



getLastAccessedTimeQ 



setMasrfnactivefotervalfl 



getfiilaxlnsctivdinierval{) 
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Key Htf pSession methods 

You ali'ciLcly kintWLiboMi 1 1 ■> ■ ■ methods fbr attributes 
(grtAtcributcQi KtAltrfeutfiQ, ranov^ttnbute())i Iji-ii here 
are ;> few k<?y ones yoa mijjlu meed in y<>ui appli^uiwi 
(and thai might be on ilu- cxLtm), 



What it does What you'd use it for 



getCreationJimeO 


Returns the time the 
session was first creased. 


To find out how old the session is Vbu might want 10 restrict 
certain sessions to a flxed length of time. For example, you 
might say. "Once you've logged in, you have exactly 10 
minutes lo complete Itiis form..." 


getUstAcce$sedrime() 


Returns the last time the 
Container got a request 
with (his session ID (in 
milliseconds), 


To find out when a client last accessed this session . You 
might use it to decide that if the client's been gone a long 
time you'll send ttiem an emaif ashing if they're coming 
bar*. Or maybe you' II invalidate^} the session. 


seiMaxinactiveln tervalQ 


Specifies the maximum 
time, m seconds. That yew 
>vani to ai ow between dieni 
requests for this session. 


To cause a session lo be destroyed after a certain amount 
of time has passed without (he client making any requests 
for this session This is one way to reduce the amount of 
slate sessions sitting in your server. 


geMaxfnactivetntervatQ 


Returns the maximum time, 
in seconds, tfiat is aliowed 
between diem requests for 
tfiis session 


To find out how long this session can be inactive and still be 
alive. You could use this to |udge how much more time an 
inactive client has before the session will be invalidated. 


invafidatef) 


Ends irs sssS'CO fhis 

includes unbinding all 
session attributes currently 
stored in. this session, {More 
on lhat later In ttits chapter.) 


To kill a session if the client has been inactive or if you 
KNOW ttie session is over (for example, after the client does 
a shopping check-out or logs out). The session instance 
, ; rse/f might be recycled by the Container, but we don't care 
Invalidate means the session ID no longer exists, and the 
aUributes are removed from the Session object. 



FLEX YOUR MIND 



Now that you've seen these methods, 
can you put together a strategy for 
eliminating abandoned sessions? 
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You can't be serious, , does 
this near, that I have +a 

keep track ef session activity 

and that I have to destroy 
the stale sessions'? Can't the 
Container dd thnt> 




Setting session timeout 



Good neWM yi m (fott'fhave to keep track of thi* voui'seir. See ihose 
im-dunk on (he opposite page? tou flon't have to tiw them to gel 
ml III stillr (inactive J xs-iHfiiiUls. '['he Container e:w do u k>r you. 

Three ways a session can die: 

► It ikies out 

>■ Vim .-all iuvalidim-d m (be session uhject 

>■ The appUcatlofl p^down(i*a*hes ()r b undepkyed) 



(T) Configuring session timeout in the DD 

CtmliifLiring a timeout in the DD has virtually (he 
same ellect us calling sotMaxIiikU'tivelniervall'i on 
every session that's created, 



<web-app . . . - 

<£&tvlet> 
■ i ■ 

</servlet> 
< jjeu s i r_-n- e cj nliq 
<session- 
</3e3siori-confiq> 
Wweb-app> 



TimecHJts in 
the DD are 
ifl MINUTES! 

Here $ a fijg j'ncixisjsfency to 
watch out for... you specify 
timeouts in I^e DD usfflg 
M/NUTES, fiutrfyou seta 
t/m&oul prografrtmatJcaWy you 
speo'Jy SECONDS* 



Setting session timeout for a specific session 

IT fou watii t<j ehetnge the teitfioA<-tuneott( value f^r 
.1 particular session irittanre (wiilunti uflnring ihe 
(iineiuit length [or any other Sessions in (lie npp'i: 



session. setWax Inactive Interval (50*60) ; 



3 yev call ^ 



re^uetti » tte sessi™ far 10 mkmbes t kill it* 
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session timeout exercise 



DD 



Code iVLagnets 



Specify st both tJie DD. and pragrammatically, thai if a ses- 
sion does not receive any requests for 20 minutes, it should 
be destroyed We put one magnet in the servlei for you, lo 
get started, and you might not use all magnets. 



- Servlet 




public VCild doGet (HttpSetvletRequeat request, HttpServletttespurii'e response) 

throws IGException I 






5^5 S l, ~* r ' ■ | 




getSE rviet context () 


.gEtSe$gidnf|; 
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f. 



i 



BE the Container 

Each of ihe two listings Tepme nts cod« 
from a co^W HttpServlet. Your job is 
to think J'ike the Container and determine 
what wiJI liappen when each of these 

Servjets art 1 invoked twice by 
ft il^ sant- client. Describe 
*hat happens the first and 
second (!%■ the same client 
accesses tksepvM. 



public void do£~et (HttpServletP.equest request, HttpSorvletftesponse response) 

throws IDException I 

response . setconten tType < "text /html * I ; 
PrintWxiter out - response. get Writer () ; 
HttpSession session ~ request.getSeEeicin (} ; 
session. set At tribute ("foo", "42") ; 
session.; setAttnbute Pbar", ; 
session. invalidate I ) ; 

Sttiny foa - [String) session. geLAttribute <"£do"'} ; 
out.println{"Foo! * + foo); 



public void deGet (HttpServletRequest request, UttpServietResponse response) 

throws lOEXL-eptian ^ 

J. tf^j-H-TLl^a fc^ . i*f L<-.LJJIL_t±LJ L L V |Jfc5 S LtfAL/ JiLjLLL 

PrintWriter out - response. getWriter ( t ; 

HttpSession session = request .getSession () j 

session. setAttribute ("foe", ^42") ; 

session. seti^axinactivelnterval (0) ; 

String foo = (String) session. getAtt r ibute ("too"} ; 

if (session. IsNew (> ) | 

out. println ("This is a nev session."!; 
I else I 

out .println [ "Welcome back:! ") ; 

I 

out.. print in ("Four " * fou) ; 
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DD 




i Answers 



Specify m both Ihe DD. and 
that if a session does no! receive any 
!qf 20 minutes, rt should be destroyed. 



MINUTE- 




Servlet 

public void dQC^t (HttpServletRequest request, HttpServletFe^ponse response) 

throws lOException \ 




session. ■secMaxltiactivelnterval ( m.2t>Q I ) 
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public void doGet (HttpServ let Request request, HttpServletfteaponse response) 

thCQWs tOEXceptian [ 

response . setContentType ( ""text /html" ) ; 
PrintWriter out - response, gettfi iter ( I ; 
HttpSession session = request .getSession () ; 
session. setAttrifaute("foo" r "42") ; 
session. sotAttributefbar", "420") f 
session, invalidate ( ) | < here we in«lid*te 



(Z) 



String foo = (String') session. getAttribute ( " foo") ; 

o.t.println ,-Foo: - ♦ foo) , ^fcUtSTTtk. 

bet** tte J*«^y IS 

Result: a runtime exception (UlegalStateExteption} is i^ald' 
thrown because you can't get an attribute AFTER the 
session becomes invalid. 

pjublic void doGEt. (Ht LpSEtvietREquest request, HttpSsrvletHeEponse response) 

throws IOException [ 

L-esponse. setContentType ("text/html"} ; 
PrinrWriter out = response . getWr iter ( I t 

HttpSession session = request. getSession 0 t titrt we're t*»si"5 the session "fcp 

session. setAttcibotsiHoGfl, M2") f fcb*»4 IMMEDIATELY, betJuse 

session. setMaxInactiiralntenral(O) ; ^ — " . 11 Jw llu + After 0 

String foo = (String) session. getAttribute ("foo") ; wC1rt "T 1 ^ VT* 



■■session . isNeW ( J > 



out .println ["This is a new session."); Jjw U't tail ii^/ Cto O or, a itiiwn that's 

f ( a^ady b«* IwflJirfatei So it'i r^lly the 

otit.printlnrwel^me back!"! ; «*« problem a, the Cede above JtjJl 

out « print 1 n ("Foo : * t f oo) ; 



ResuJt: a runtime exception ( I llegalStote Exception) is thrown 
because you can't call IsNbw() on the session AFTER the session 
becomes invalid. Setting the maximum inactive interval to 0 
means the session times out and is invalidated immediately! 
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custom cookies 



Can 1 use cookies for other things, or 
are they only for sessions? 




Although cookie* ttvre origimilly designed to help support 
session state, you can use custom cookies lor other things. 
Remember, a cookie i& nothing more than a little piece of 
data (it mimr/vaiue String pair) exchanged btftween the 
client cm (I fCt'Mtc I be sei'VCr settd.i thr. cookie t(i the client^ 
and the client tttvnu the cookie when iln- client makes 
another request. 

One cool thing about cookies i* thai the wot doesn't 
have to get involved — the cookie exchange is automatic 
(assuming cookies are enabled on the client- of course). 

By default, ;i cookie lives only as long as a session; once the 
client quits his browser, the cookie disappears. That's how 
the "JSESSIQNED" cookie works. But you tan tall a cookie 
Id stay tttiiMt fi'fir AFTER the browser shuts titm-n. 

Thill iv;iv; your wb npp can Hiill get the- c ookie information 
even though the session with that client is long gone. 
Imagine that Kim want* to display die user's name each 

time he return* to the beer site. So he sets ihe cookie the 
first tisw N« "r eives the diem'* name, anrl if be gei* the 
cookie back with a request, be knows no! in ask for the 

name again, Ami t! tfotMi'f matin if thr »srr rtstartrd hit faomtT 
and ftttoft hten M tht .nfe Jot a wrrk! 




Server tench 

Ufa firsl, 



You can use cookies to 
exchange name/value 
String pairs between die 
server and the client. 

The server sends tie 
cookie to the client, and 
the client sends it hack 
with each subsequent 
fewest- 
Session cookies vanish 
when the client's browser 
quits, but you CAN fell 
a cookie to persist on 
the client even after the 

Uiur*<jti .junto m/iTi'. 



Cockier «s e r^ me ^ T 



l.^, — Client sends 
< Hii hack. 
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Using Cookies with the Servlet API 



Y< hj e? »lcti<-irl<iti<il Im-.mI. i-, mil gf ihc HTTP 

rt-qut-si atuj rehouse; bin tiw't, Rvemhiiig you m<-<mI 
nt da wiih cootdeit has. been enevptutetod in the 
Sc*vfei API in iJii't-c classes: HiipticrvtctEfi^UBat) 
UlipHrrvli jtReipoiMfc, and Cookie. 



gelOuafyStringi) 

gclSessiofHJ 

//MANY more metfinds-- 



juesl 



juvsit.iervlEt.h ttp-HttpServtetResponse 

addCoofdef) 

sefSfaiirsfj 



C renting a HBW Cookie 

Cookie cookie - new Cookie fusernanie", name;)? 




Setting how long a cookie will live on the client 

cookie. setHaxSge (30* 60) f 



Sendinq tho cookie to the client 

rsspnnsft . a iliiCnnlr i p (nnnk^) j 



l. 



Getting the cookie(s) from the client request 

Cookie[] cookies = request. getCookieM ) ; 
for (int 1 = Of i < cookies. length; i++) I 
Cookie cookie - cookiesli]; 
if (cookie. get Name ( ) .equals C"username") ) 
String USerName = o-iokiti . getVd lilt; ( ) ; 
out .firintln ("'Jtello " + aserName) t 
break; 



i 



i 
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Simple cvsf ow cookie example 

So, [magini thsu Kitu wants eo pot up a fhrni thai sab the llsl-i in £at>tnii ln- 
B«me. TIk- form r-«ills n smlei ihm gen the unernmiK; n-qm-n parameter, 
ami Hies ihc rimnf value hi *<'i a omkie in the it.'spinw. 

The next time thin user makes a reque*! on AM" icrvkrt in ilih web app, ilir 
cookie comes kick ^iih i h i < ■ 1 1 1 1 - • - 1 as-simiing ih*; cookie is still alive, kiwd 
mi 1 1 1 r- cookie's maxA^*' value:. When a servlel in ihe web app set's ihii 
cookie, it era pul the user's name inbn the rfyndiniicfllly-genLTalcd response, 
;md ihf business logic know& not to ;isk the user to input his name again. 

This code U a slinplificd test version ol' the scenario wc just described. 



Servlet that creates and SETS the cookie 



import javax.servlet . * ; 
inipur t j BV*X . servlet . ht tp . * ; 
import java.io.*; 

public class CookieTeat extends HttpServlet ( 



public 



do P ost (HttpServ let Request request, HttpServletResponse response) 

throws lOException, ServletException \ 



response, setCQntentTypt; ("text/htmi") ; 

String name - request .get Parameter ("user name"! ; ^f** 

Cookie cookie = new Cookie ("username", name!; j 



cookie. setMaxAge (30*60) ; 
response. addCookie ( cookie | ; 



Hwj -the 



Add & ««Jc, t a* a -SH-Cc*k.«" 
•■ejpwvse header 



rJie resworn* pj^f. 



rlequestDispatcher view = request. getRequestDispatchor ("cookieresult .}sp") f 
view. forward (request, response) j 



JSP to render the view from this servlet 

<html><body> 

<a htef- w checkcookie,do M ^clic!fc here</n^> 
</body></html> 



»™ u / r0 " *L a JSP 



Oat 
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Custom cookie example continued^ 

Servlet that GETS the cookie 

import javax.seivlet,*; 
import javax.servlet.http.%- 
import iava.io.*; 



public class CheckCookie extends HttpServlet 1 

public void doGet (HttpServlatRequest request, MttpServletResponse response-) 

throws lOException, Servlet Exception \ 



response. setContentType ("tent/html") ; 
Pi ir-tWritet ol|t = response .OetWti ter ( > t 

Cookie!] cookies - request .get Cookies () ; 



if ( cookies L= null ) ( 

for (int i = 0; i < cookies . length; i-H-l | 
Cookie cookie - cookies [i] } 
if {cookie .getNajne ( \ .equals ("use-maine*) ) I 
String userName - cookie .getValue {) : 4L. 
out. println ("Hello " * UEerNamel f 
break ; 



I 



Jfybx 

know the ten, ^ * ¥ u mus t 



L«f -t»«-o^h the Cookie J*vjy 
Mfo) for i i tookie .j^d 




Don't confuse Cpokies 
with headers' 

Whe n you .« a he^lo a *i P«* W 

Mid value Strings as arguments. 

te5P o^e.addHeade r (^oo^ "bar") ; 

Cooto objk Vou Se ? (he Coo*s name * tf» 

Cookie constfudor. 

Cookie ,o.k ie -ne W Cookie lW>> 
respoase.addCockie (cookie) I 

And rtmemter too, that thew s botti a setHsatfertf and 
IWte ) mefbprf facWrieadoradtfs a new value \u 

a, a*^ ***** # M « «J™ * J^wtoo 
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session lifecycte moments 



Key milestones for an Htf pSession 



HnpSesskm object** life: 




Session attributes are added, removed, 
or replaced by other parts of the a pp. 
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Session [ifecycle Events 



Milestone 



Event and Listener type 



Lifecycle 

The session was created 

Wlifii ilit- Cnui.dtier firm creates aitession. Ai thin point, the 
session is still considered new in other word*, the client has oof 

yet sent a request wilh the session ID). 
The session was ctesfroyeo* 

W ItH'it ilif Container iitvalkSate* a s**sioti because ihc session 
limed Out nr some part of the application called I he session's 
invalidate!) method). 



HttpSessionEvent 




Attributes 



An attribute was added 

When some pari of the app calls setAinrtbutt^) on the session. 
An attribute was removed 

When same pan of thr app erilh peniovcAttributeQ on (In* lession. 
An attribute was replaced 

When some nairt of tin- app rail?. wiAirriiMiie-:. on ihe sesstoii, and 
i In- uaim- o|' 1 1 ii- ai tribute has already been bound lo ihr session. 



HttpSe^io^BihdlogEv^nt 



HttnSessionAttributeListener 



Migration 

The session ie afcou* to be passivated 

Wlu'j] ihr Container is ttlioiil fa nngratx itnovei the session into 
;i different VM. Called htjm the session moves, so that attributes 

haw a i \\*\w.r to prepare themselves for migration. 
The session has been activated 

When i lie Corii.iiiiei has ,,vof ini^raLt-cl iuiovi-d) ihr- si-ssjon into .1 
diH'emn VM, Called before am other pari of the app can call 
gctAttrihuteQ on liie session, so the juat-moved attributes have a 
chance In sjel themselves ready for access. The sc 



HttpSessionEvent 
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HttpSessionBintiingUstener 



Pon 1 forget about HttpSessioMpindrngListcnGr 

I'hi-. events on the prevjptta pii«t l are for key m?m*tm it) the life ol the 
n'.uw. Rid ilir H i tpS^si^tvBindtngLbtetier is fur key moments in the 
lift? n\ ;i tessiofi #ttribuie> Rmiemher frorii [|iap|er & where we Jctrhk+'r) ai 
how vim might use this— if, for example, your attribute wants Co know- 
when its added to a session so thai Si am syiifhroiii/A' ilwlf wilh an 
underlying database land update the database when it'<t removed Irom a 
session). Here's a little review from the previous chapter: 



package com.examp ie; 

import javax.servlet.http.*; 

public class Dog implements 
private String breed; 

public Dog (String breed) 
thie .breed-breed; 

\ 

public String getBre-ed() 
return breed; 

I 



HttpSessi o nBi ndingL i 3 tene r 




Me 



public void valueBound (HttpsessionBindingEvent event J 

// code to run new that i know I'm in j cession 



ESS?* 



i valueUnbound(HttpSessionBindingEvent event) 1 

// code to run now that I know I am no longer patt of a session 

1 




You do NOT configuration 
binding listeners in the DDI 

feinted listeners on ffra prevwx pq» «-7 fh 
DD a'me they re reefed ft) tnesessmfi ks«w. 
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Session migration 



Remembe li-ntn tfw pjnevwus chsqjtef; *v# inllo-d briefly about di.^ tribute I v.^ ■■ I ■ 
iippi, where i hi* pieces "I the m>p mijrhi be pepifcaied across multiple node* in 
i h * ■ network. In clustered covfeeojciMsiii, die Container might do Awd htihts<m» by 
ukmsi client requests ;md sending iliein nui (c> J\*Ms i which may or msiy not be tm 
dillcrenl physical boxes, btil that doesn't matter lo u^. The point k, I he itpp is in 
multiple places, 

Thar means each time the juime client makes a request, the ncquc?l could end Lip 
going to u different instance ol" the same servlet. In other words, request A for Serrfel 
A could happen on nnc VM. .mm I request B lin' Servtei A enuld end up rm .1 diHercm 
VM. St> the question is. what happen* to things lik<- ServtetGontott; ServlrtConfig, 
and EtttpSessSoti eibjecte? 

Simpk answer, important bnphcation*: 

Oir/y HttpSessiGn objerts (and their attributes) VM to another. 

There is one EkTvietCootcXl per VM. There is one ittviciCmi$jgp£t sefpfd, ptf I'M. 
Hut there is only one UttpSession object for n given session ID per tt/eb app, 
regardless of {tow many VAt's the app is distributed aeross. 



The *w Web App distributed across two VMs 

rr9> 



VMl 

Beer Web App 





Eath icrvki hai rb own 
So-wleiCon^j awl both 
tervleti m the web app 
share a £mletConte*t- 



Wttp£e«™ it dictated 
m the other 



VM 2 
Beer Web App 




#128 



Note everything u duplicated 
in tht setiW itf^eir EXCEPT 
the WttpSeaioh objefrb' 

Seniors live to only f'N'f- place 
tytp$&&&' ^ any <ji*en moment The 
ih*t itmo* IP for i 51 vc^ 
web app will ME^ER appear to 
two H/A1* at t^e same in^c 
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Session migration in action 

How an ;»pp twryei vendor handle* clustering and iveb apjp 
di-ii[ilnni[)ii varies with rath vendor, and dirrr's no guarantee in 
thejJlEE spt i. thai a vendor Iihs to support distributed apps. Bin the- 
picture hepc pint's you a high-level idea of how it works. The key point 
is thai while other parts of the app art - rrpfkiiltii on cadi nodo/YM. 
the session objects sire moved. And that is jrnaranlced.. In other words, 
1 1 the vendor ioti support distributed apps, then the Container is 

rtfHirtd ttgrate Ression* aertm VMt And thai includes migrating 

Session attributes ;is we IK 



Diane selects "Pale" 
and hits the submit 
button. 



The Lead-Balancing server 
decides to send The request 
to Container A- 1 m One. 



The Container makes a new session, ID# 
343. The 'JSESSIONID" cookie is sent 
back to Diane m the response (nut shown). 





Lend- ha lane ing 
Server/Container 



Diane selects "Bitter" and 
hits the submit button 
Her request olso includes 
the -JSESSIONTD" #343. 



This time, the Load-Balancing 
server decides to send the 
request to Container A-Z in 

m Two 



The Container gets the request, sees the 
session 10, and realizes that the session 
a different Vfo. One! 





Load-balancing 
Server/Container 
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The session #343 mi grates from VM One to 
vM Two. In other words, it m longer exists 
on Vft One once it moves to VM Two 

This migration means ths session was 
passivoted on One. and activated 
on VM Two 





Container A-2 



The Container makes a new thread for Servlet*. 
and associates the new request with the recentfy- 
mo-yicd session #343. 





Lood'balanci rtg 
Serve r/Contoiner 



Siena's new "e^uest is sent to the thread, ond 
everybody is happy, En one has no idea what 
happened {except for the slight delay/ latency 
waiting for the session to move). 
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HttpSess/Qn = Listener 



HttpSessionActivatioidUteKer lets attributes 
prepare for the big move... 



Since it's fitiwihif i (ml .hi HttpScssioci citti migrate from one VM in 
aii<nlier. tlir spec dVsignen llmu^lu it Would he nice il' someone 
bothered to tell ihe atiributcH wilhin the iessjba that they, loo. 
were abntu hi timve. That way the atuibutt'H ran make sure they'll 
swriiwE the trip. 

Jl all your attributes are straightforward Herializable objects that 
(liHi't i :iir where they end up, you'll probably never use ihi* listener- 
In fact, we're guessing M5.324% <>f all wet anps tieswr use this 
lisirner. Bill it's there if you nerd it. and the roost likely Use »f 
this listener is to give attributes a chance to make iheir infante 
variables irmly i ■ i r Serialization. 



This listener is so that 
ad on attribute. I tun find uut 
when I'm about To be moved to a 
new as part of a session, and 
I cart make sure my instance 
variables are 



iion migration and Serialization 

Non ii gets -i little truky... 

A Container in required to migrate Seriatitubte attributes ■■.vlii* Is 
assume* thai all instance variables within the attribute are eithet 
SerializaHe Of null}. 

if ut a Container is not required to use Serialization as the mean* 

lot rnifffaiihg the HttpSeawon uhjeit! 

Wh.it does thi* mean to you? Simple:, make sure your attribule 
class typi"s are Seriafizabk and you never have (o Worry about it. 
Bui if they're not Seriali/ahle uvhidi tonhl be because <me «f the 
attribute object'* instance variables is not Se realizable), have your 
attribute object class implrmtnt HitpSrsskaiAtiivnikiuListencr 

ajid iisr the ai lUaljuii/piibMiiiliuii iu.Ubiii.ks Ul noi k uiuuiul it. 



HfipSessJofl^cffMtttKnt.fstefiBf 



&&onYflttPa$stV3te(Http$osslonEvent) 



jft'.-dx servlei http HttpSessianAci '.'ationl istener 




' 4 DcmnRCD to use Serial! m«on, so there's no 

SSUte fieJds to rruff during Sen^ai o« f " f Serialililtl on, don i *orry atouf rf. j 
S (fie methods «Wl r«M«y * «*d ^^SSkMMf. «d u» *• hvo «wjr 



260 chapter 5 



session management 



Listener examples 

Ovtt i hf nexi i L 1 1 1 ■ pag^t, pay attend tw w th* even! obj« i 
types ;ltk( in whether the listener is also an attribm<- d;iss. 



Session counter 

r 1 11-- listener let* you keep twek "I" the numbei of active 
se&loiu in thin wi-h upp. Yt-n siin[>|r. 



package ccati . example; 

import javax*servlet .http. * ; 

public clas£ Beer Sees ionrjounter implements HttpSessionListener j 

Et.atic private int act-iVeSessU-na; , j.-UMtd *» ^^'^l^lcb 

tu (1 da* * Zlm t^' 4 ' M L 

public static int getAct iVBSeosiotta ( ) ( L, A \\ \!*t V^t^r, **** 

return activeSessionsf *" ^ other ^V** - 



Dublic void se33ionCreated(HttpSessionEvent events ; \ 

aetiveSeseidne^ ™ eie »™« take a* 

public void sessionDestroyedfHttpSessionEvent event) { 

act iveSeaaionc — ; 

1 

I 



<web-app 



<listener> 

<listener-class> 

com . exainpl e .BeerSessionCounter 
</listener-class>' 

< Alstons ji&taW r. fSE b ^jL^ft 



J<J" tw tin, feel*** , . 
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Listener examples 



Attribute Listener 

This listener lets you track each lime any attribute is 
added to, removed from, «r replaced in a »fe*$£fl. 




package com . exampl e ; 

import javax.servlet .http. * ; 



public class BeerP.ttributeLifjtener Ijnpifernentii HttpSassionAttribut*Li*t«ler | 



System, out. printlnl*R.ttribute added: " + natou + w ; " + value); 

I 

public void attributeIlemoved(HttpSession£indIjigEvent event) \ 

String name = event. getlJame l) ; 
Object value = event. getValue t) r 

System. out. prititln ("Attribute removed: * + name + ualue); 



:■>:: ii. : a 1 1 r ibuteRep laced ( H t tpS e s s i qelB£ ndingEven t event) i 

String name = event. getName {) ; 
Object value - event . getValue () ? 

System. out. print In (" Attribute replaced: " * name + ": " + value) t 



public void attribute Added (HttpSessionBindxngE vent event) i 




Configuring the listener in the DD 




to? Where doe j System. cut go in a web app? 





<listener> 

<1 is tenet - el as s > 

com . example . Bee rAttribute Listener 



t\* Wherever this Container chooses to 
send it (which may or may noi be configurable 
by you). In other words, in a vendor-specific 
place, often a log file. Tomcat put: the output 
in tomcat/logs/catalina, log. You'll have to read 
your server docs !□ find out what your Con- 
tainer does with standard output. 
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Listener examples 



Attribute cta»* (listening for went* that affect IT) 

Tin-* Uptener <m attriinitt- kn-p irwk of event* chat mjghj be 
Unportaiii iv the attribute itself when it* added to fir removed ('nun 
i session^ utd whet) the session migrates from one VM bp another. 

package com. example; 

import j avax . set vlet . http . * ; 

import java.io.*; 

public class Dcg implements HttpSessionBintiiitgLis tener , 

HttpEessionActiratienLis terier, Serialisable [ 

private String breed; 

// Imagine more instance variables, including 
ff some that are not Seriaiizable 

// imagine constructor and other getter/setter methods 

Nation biivdiTi CH e*eivti 



public void valueBaun4{Http5essionBinding£vent event) 

// code to run now that 1 know I'm in a session 



: } 



public i valueUiibouiiiUHttpSessionBindino'Evient event) I 

// cede to run now that I know I am no longer part of a session 

1 

public void sessionWillPa33±vate (HttpSessionEvent event} [ J 

// code to get my non-Serializable fields in a state / 

// that can survive the move to a new VM / £ " t * on atfc lV *t'T 

i > <«h-b <wt i«jt>c< took 

{ the **kkod* take 3m 

puulii.. voiJ wsaionDidiiCtivate (HttpaessioEiEvent event) i J UttpSifision EvtivfJ . 

// code to restore ray fields... to redo whatever I undid / 
// in sfissi nnWi 1 1 Passi tfafefl (J 

I 

I 
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Session-related listeners 



Scenario 



Listener interface/ 
methods 



Event type 



Usually implemented by 



You warn (o know how 
many concurrent users 
there are. In other 
you want to track the active 



HttpSessfonListener 



sessianCreated 



Wl;:Sr«R wF-.-e-il 



□ An attribute class 
^^Soms otfw class 



You want to know when a 
session moves from one 
VM to another 



HttpSessionAeiivationLi stein er 

(javaxservlet.nttp) 



HttpSessionEvent 




^^An attnbute class 
jJ^Sofne otter dass 



You nave an attribute class 
(a class for an object that 
wil be used as an attnbute 
value) and you want objects 
of this type to be notified 
when they are bound to or 
removed from a session. 



HttpSessionBindingListener 



vatueUnbound 



HUpSessionBindingEvienl 



^B^Anattnbuledass 
□ Some orfier class 



You want to know when 
any session attnbute 

ic arlrlprl rAm™prl nr 

t in a session 



H ttpSession AttributeLlstener 



attriouSefienrioved 
ahfrijureffepjaced 



HttpSession Binding Evenl 




□ An attribute class 
S0TT>S O'J'S!' Cl35S 



0 



Some of the 3flSS ion-r ela ted 
follow the event naming conventions! 



fhere was 



no need for the API to add (wo move 
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Session-related Event listeners 
and Event Objects AM overview 



HttpSessionActh/aticnUstene, 



SQSsionQiiiActHate (HttpSessimEvenii 
sessionWHPassivsle fHttpSessicmEv&it) 



HttpSessionListemr 





HttpSessicti&indingListener 



VaSwBaundiHtlpSessiQnBindmgEvwit) Qj\ 



HttpSestionAttribate-Lister&f 



attributeRemovsii fHttpSessKmBindingEvant) 
attimeReplacediHstpSessSofiBincsingEveiiU 



HHpSessionEvent 



SelSession.; | 



— 




HttpSeisionB in dmg Event 



jt I.N 

getValueO 



Thr method rtium^ 

the String nawe of the attribute 

that truwered the event, 

... _ ^ 

"Hit yt\Zal*<.() method return 
tKe objett vaLe of the attribute 
that tr^ijertd the e*ent WaUH 
out' ft retkrni the old vaLe, not 
"the new one In other wovds, it 
(retains the v?Le the jttrtatt 
had BEFORE the £ha^ 9 e tKat 
h-'^crtd tKe event' 
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Session-related listeners 

Yes, (his is almost an exact copy of (he sable from two pages back. 

so don't go (here. Try to think through these listeners end put down 
your best guess. You can expect at least two, and as many as 
lour questions on the exam about session listeners. Use both your 
memory and common sense 10 fill this out. 





Listener interface/ 
methods 


Event type 


Usually implemented by 


You want lo know when a 
session is created 






□ An attribute class 

□ Some ortie; class 


An r>l!!!!:.i.k. ,v nN I-.: know 
when it has been moved 
into a new VM. 






□ An attribute class 

□ Some other class 


An attribute wants to Knew 
when it has been replaced 
in a session 






LI An attribute class 

□ Snmfi nth&r rJass 


You want ro be notified 
whenever anything is 
bound to a session. 






□ An attribute class 

□ Some other class 


sai 
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(.i'.vn: 

10. public class MyServlet extends HttpServlet { 

11, public void doGet (HttpServlotRc-quest request, 

H t tpServle tRe spons e response) 
12- throws IOException, ServletExeeptlGn { 

13. // request, ge tsess ion O . setA t tribute C'lcey", "value"); 

14. H r eque s t , ge tH t tpSes s i o n ( ) . se tAt tribute ( " key " , ™ val ue " ) ; 

15. // ( (HttpSessionJ request ,getSeasion() }. setAt tribute ( hl, key" , "value"); 

16. // i (HttpSession) request . getHttpSossion ()), sotAttributc {"key" , ^valuo") ; 

17. } 
18- } 

Which line(*J rould be urn onimciitcd without aiming a compile or runtime emorV 
i.Clu wwe liII tliru apply.) 

□ A. Lint' 13 unh. 
Q ii. tine 14 only. 

□ C. Linr 13 i.nly. 

□ 1). Line Hi only. 

-1 & line 13 W linr iBi 

□ I: t&e t4c*line lb. 



J!' □ client TV-ill MOl accept n coolie, which session management mechanism 

could tbe web container eittpfoy? (Clioo-ic unci 

Q V Cookies but NQT URL Tfrwiting, 

O 11. URL Yi-i-, i iiiny. Ihm M Y\ h iMtkii-s. 

Q & l-'iihi'r cookies or UUL rewriting i-im be used. 

□ U Neither i:ookits ni tr URL rewriting tan be Used, 

□ E. Cookies and URL rewriting must be used together. 
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Which M.itnm-nts ahum HttpEession ohjpcH arc true? 
(Cfaodve all that apply, i 

□ A. A it-^MPii u!|um' rlmCBUi jjriliPil tun bi-rji Set tO -1 H ill 

ocvtf expire. 

□ IS. A sc^lon v^M become invalid a* wwo a* tlw user doses 

all browner wintfowt 

O C A sc»kni will become invalid after a litm-oni pniorl 

dr'lllli'll ii) III'- 91!) v |r( <-<i[U;iill' l 

□ II A v ^inji ml;i\ In- eXpKeitly invalidated by calling; 

HttpSession. invalidate Session () . 



U'hn h oj iln' lollmvinp an- NOT listener cveol types in the j^LL' 1.4 API.' 
(Choose all that apply, i 

□ V HttpSessionEvent 

□ H, ServletRequeatEvent 

J t:. HttpSessionBindingEvcmt 

□ I) HttpsessioriAttributeEvent 

□ E. SetvletContextAttributeEvent 



Which statements about session tracking are truer" 
(Choose all that Apply.) 

Q A. URL rewriting may be used by a server as the hasis. lor 
session triiefciiijt 

□ H .SSL has a built-in mechanism that a tervkt conb^er could 
use to obtain data used to define a session. 

Q C. When using cookies lor session tracking, there is m> 

restriction nn the name ol' thr session tracking rookie. 

Q 1>. U'ben using rookies lor session tr.iLkiiin, the name of the 
session tracking ecu ifcfe mux In- JSESSIONID. 

Q L. It' .1 osef ha* rookies disabled in their browser, the 

contains i m.n ■ 1 1 ■ i • ■ i ■■ ■ .■ javax. scrvlct .http. 

CoalfielessHttpSessiOP '<I)jc< r lo I nick tin- user's session. 
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Givetu 

1. import 3 avax . s ervle t . ht tp . * ; 
£ . public clMfl KyOeasionLisfcernsr 

ircplements HttpSesslcnListener { 

3, public void sessionCreatedO { 

4. System, out .printing 1 Session Created") ; 
S- } 

6. public void aessionDestroyed() { 

7. System. out. println (."Session Destroyed"): 
9- } 

9- } 

\Vhal is WTOiirr with tfiis class? (Choose all thai Hppfy i 

Q A. The method signature on s is j?J0T correct, 

O Li The method signalurc im iinc li is NOT correct. 

G. The irtiporl statement will NOT iniporL Lht 1 
HttpSessionListener ijik:rl;u e. 

□ ]> sessipnCreated ,nu! session-Destroyed ;in- ■ Nt )T i he- <nil> 
method defined by the HttpSessionLiBtener interlace. 



Whirl, Statements ;il»iui sesnim, utirihute* are WFttSl (CBftW* rfl llwl ii|»l«lv.i 

□ A The re turn type ci HttpSeasion . getAttribute (String) is 

Object. 

□ H, Tin- njmrj] iy]n- d| Httpsession, getAttribute (string) is 

String 

O C. Attributes bound into a session we available to anv other service 

is M in -.in viii in- ServictContoxt . ■ 1 1 ■ i ii.uiuio :l ri'ifiirsi 

nimbi ird As bcUM |i:ii'f nj the siii'nt' SESSlQft. 

□ II t:.il.liiiii setAt tribute ("feeyA", "valueB") m .m HttpSeasion 

Which already Isolds a value fur the fcty koyA will cayse an exeeptbn 
in In- ihriAvii 

J I-. < .il n-_ setAt tribute ( "ltGyA-" , "valueB' ) , ,i H^tpSession 

which already hold* h mine Inr (In- key keyA will vnnsc i]i<- previous 
value Cor ibis attribute l<s lie replaced with lhc Siring valueB . 
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q Whuli ihterfacea dcline a CfetSession 0 method? 
O (Choose all thai, apply.} 

Q .y aervietiiequest 

□ H. ServlctRosponsc 

□ ( .. HttpServLetRequest 
Q !) HttpEervletResponse 



Ciivcn a session object 3. and ihc code: 
3 , setAttribute { "key" , value) : 

Wliii L Kxtenen could lie aotiGcet? ((']nH»st- imr.: 

□ A. TliiK HttpSossionListcner 

□ (J, (July HttpSeasionAttriLuteListener 

Q 1). HttpSesaionListener 

, 1 1 n I Ht tpS e ss i onBindingLi s tener E 

G J- HttpSessio-nListener 

W Ht tpSe s s i o rift 1 1 r ibu teLi s teno r 

□ I HttpSessionBindingListener 

. 1 1 1 1 1 HttpSa ss i onAt tribu teLi steno r 

□ (.., All ihrvc 



(jivi.ii ih.n req r- .in HttpServletRequest, which snippet! create a 
session if unc oV>rii[f I MCtft? (ChtiOse all thai ajiply. I 

□ A. teq.getsession ( } : 

□ II req. getsess ion t true} : 

□ C req.getSession (false) ; 

□ D req.createSesstonO : 

□ I!. req.gBtNewSassionO ; 

□ I . EcqxrcateScssion(tn]e| ; 
L) C. req . createSession (false) ; 
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Given n session object a with two attribulcs namerl myAttxl find myAttri. 
Which will ™nvf hoih ,iHiilaties Erom this si-siimi? {CIvhw ,tt] thai apply.) 

LJ . \ . e . rcmovcAl IValuo e ( ) ; 

□ IV s .removeAttriimte ("myAttrl'') ; 

s . remov&At tribute ( "myAttrZ" ) ; 

□ (.. s . removeAllAttributes {) ; 

□ 1 ). s . getAt tribute ( 'myAttrl" „ UNBIND) ; 

s . getA t tr ibu te ( <' myAt t r 2 " , UNBIND) ; 

□ I! 5 . getAttributeNaraes (UNBIND) ; 



Which itiiifmciits .abnur HttpSession objects, in distributed 
environments arc true? (Chnose alt thai apply.) 

Q A. \\ hi'ii a session is niovi.'d Irom one JVM In another, any 
ai tribute* stored in the session will he lost. 

□ I!. When a siskin ts moved Innu one JVM to another, 

appropriately registered HttpSassionBindingListener 
objects will !«■ tt6tlfied. 

L-l C When 11 session ts movrd from oneJVM to 

Emothec any session attribute implmcntiRg die 
HttpSessionActivationLis tenet interface wtD be in n ir"i--i I - 

L7 I ). \\ lii-is .1 ir i h moved I'mtu ontfJVM to another, attribute 
values tli, ii implement java, io . serial izable will be 
transferred to »bc new JVM. 



Which statements about session time-outs arc true? 
iChoose all that apply, 

u ,\. S-irSsio'Ti iiiiii = ijiii i4i : i'!;ir-j!lifih liiailr iu iiir Tjl5 ^ j 3*.-j ""j T^" 

i imc in sect nnU. 

LJ li. Session timeoui declarations matte in (Be 1)1) can specify 
time in minutes. 

□ 0i Session timeout declarations made progrlimmatbally can 

-peeil\ (imr nnb in seconds, 

□ I J. Session timeout dt+darations maoe pragiammaticalt) Can 

iptvif) lime «ml> in miiiiucs. 

L-l E. Session timeoal derLir.-tiions made prosttimjiiaiH-alh can 
spwil\ (imc ta either minutes or seconds, 
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Choose the sctvU'1 code li agnienl that would retrieve from ttrt requi's-t the value* of a I'uukit- named 
]4 "PftAJtfiB''*? (Choose all thai apply.) 

Q A. String value = request , getcu-akle (''CRA uiD 1 ') ; 
□ IS. String value - request . getHeader ("Of!A_UIp'') ; 

Q (;. javax- servlet.http. Cookie U cookies - 
request. getcookies () 
String cHame - null; 
String value - null; 
if (cookies != null) { 

for (int i = 0; i < cookies. length? i++) { 
cName - cookies [i] .getNanse () ; 
if (cHame !- null 

cNatoe .equal slgnorecase l"0RA_urD" ) ) \ 
value - cookies [1] .getValae () ; 

} 

i 

J 

Q l) javax. servlet , http . Cookie ( ) cookies = 
request. getCookics ( ) : 
if (cookies. length > 0) ( 

String value - cookies [0 J . getValue (} ; 

I 



Whfeh method(s) can he used to the c^ih»m«r to notify y».w application 
whenever a lesston is nboul to tuncoui J (d'ncist- all thai apply,) 

□ A HttpSessionListener.sessionDestroyed 

□ M. HttpSessionBindingListener .valuefiound 
J C. HttpSessionBindingListener. vaiueUnbound 
U 11 Ht tpSess ionBi ndi ngE ven t . s es s i onDe s t roy ad 

Q \L HttpSessionAttributeListener, attribubeRemoved 

— 1 I' H t tpSea s ionAc t i va t ionLi3 tener . s es s ion Wi 1 lFaaa i va t e 
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HrrtV MOukl yOU UH tlW HttpServletHesponEG iil)j<-i I Lib a wi vli'1 to ittitl ;i irntliti' dp lllr- diem? 

□ A. <aontext-param> 

<par am- name>mycooki e< /param- n ame > 
<param-va lue>coolc ieVa lue< /pa tarn -value> 
< /context-par am> 

□ li. response . addGoc-kie ( "myCookie" , "cookieValue" ) ; 

Q C. javax .servlet.http, cookie newCook - 

new javax . serv let . http, Cookie { "myCookie" , "cookie Value"} ; 
//...set other Cookie properties 
response . addCookic (newCook) ; 

□ 1>. javax.servlot.http . Cookie [] cookies = request. getCookies [) ; 

String ename = null ; 
if (cookies 1 ■ null) { 

for (int i » 0; i < cookies , length; i++) { 
cNatne *• cookies [i] .getName(} ; 
if (cNarae 1= null S,i 

cNamc . equal slgnoreCase r my Cookie") ) { 
out ,println( cName + " + cookies [i} . getValue () : 

} 

1 

} 

Given: 

13. public class ServletX extends HttpSetvlet ( 

1«3 . public void doGet(Http5ervletRe quest req, HttpSetvlet Response 
rasp) 

15. throws I ©Exception, ServletException { 

16. HttpSession seas - new HttpSession (teq> ; 

17 . seas . setAttribu te ( "at trl " , "value" ) ; 

18 . sees , invalidate ( ) : 

19. String s - sess .getAttribute C'attrl" > ; 

20. } 

21. } 

Whai a ihr result? iChixwc nil dial apply] 

□ A. Compilation fails 

□ B. Tin' V.lllJf nf S in null 

□ C. Thf value of b a "vallate* 

Q II An lOException i-. llnitih i'i 

Q K. ^ ServletException thrown 

Q !■' An IllegalStateException i- 'bi<nui 
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10 . public class MyServlet extends HttpServlet ( 

11. public void do Got (HttpServletRequost request, 

HttpServletResponse response) 
-2 . throws IOException, Servie t£xcep ti o { 

13. // request, getsess ion () . eetAttrlbute ( l *key" , ^ value") , 

14. // request, getHttpSessi on ()■ setAttribute (" key" , "Value") r 

15. // { (HttpSession) request .getSession (J }. setAttribute key" , "value"); 

16 . // { (Http Session) request . getHttpSession () ). setAttrlbute {"hey" , "value''); 

17. } 

18. 1 

Which lincty could be unainimciited VI itlinut causing a compile or runtime CttSar? 
(Che lose all tliai rapjy 1 

O A. Li in.- 9 3 only. 

□ IV Line 14 nllly. 

□ < l.i i - I '■> hsiK 

□ 11. line Hi on! v. 

LI F. Lini- 1 4 nr hnr II.. u^ pSe5ilOT4 B neeeufry, Iwt does 

the tanrtft typt, * Val ' d 



If a client will NOT accept a cookie, which session management mechanism ^ V '«f?) 
could the web container employ? (Choose one,) W 

□ A. CookicK. b\il NOT URL rewriting 

H URI ^,U«h \0 kje* ecEe* CWT be uad, but 

□ ('.. I'.itlier i ' Ni-ki.'-, <n I '!\[. vvWi il in ii uni In 1 llx'tl. URu rewnt'hj does NOT defend 

□ EX Neither cookies nor URL rewriting can be tUtict ™ ^'"4 eYl3bled 

□ H Cookies and URL rewriting must be used togelh.cn 
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Which M;itmn-ins ;iboui HttpSession obja ts ate brOtff 
fC'liarmr all that apply.,l 

5^ .V A ftmioh tobmt Euheout pei'ifd Im* hi-r-ji m-< to -1 
will nrvrr i-xpirr. 

□ & A gesskiH will become invalid as soon its the user 
, liosc.-s all browser window*. 

2J l h A scssfoh will l?cc<Mnc invalid -Hut 9 limn.mi period 
defined by (lie sttvJsl ctniitstincf, 

□ D. A session riKiy Ik- itly invalidated by calling 

HttpSassion . invalidate Session () . 



~0 P WBi* correct 
there a no 

u^Al in the HTTP H^ J - 



-Cation P |i intorrtit heCdute 
iht method that skoJd be uifd b 

tailed m^lidaMJ- 



WWdj ef ihr following are NOT listens* eifl4al types in the j I2EE 1 .4 APT:' (API) 
(Choose nil I hut apply.! 

□ A. HttpSessionEvent 

□ B. ServletRequestEvent 

□ f. HttpSessionBindingEvent -Mtp&esiiwBiftdiTvjEweti-ts are used 

□ L ServletContextAtttibuteEvent r 



Which ttatt-mcats about session tracking art- true? 
iChoosr all [hat applv.} 

a'., L'RL rewriting may be u»ed by a seiner as the basis lor 
sessiihti trai'kiiijji- 

Sf 11, SSL lias a built-in mt'chanism Lhai a servlct container could 
use to obtain data used to define a session. 

O C When usiny rookies tor session narking, there is no 

ir-,ii iriiniii on die name of the session traa king ■ ookte. 

1), When using cookies For session tracking, the 11.11 in of the 
session tracking cookie ratisi be JSESSIGNID, 

O iL If a user ha* cookies disabled in their browser; the 

toritaia.tr may choose 10 UK a javax. servlBt.http. 
CoaJcielessHttp Sees ion . -I)js:< t ic> track tfatf User's 
session. 



-Opto* C i* ir£orrett because 
■the ipeiif itatio* dittate* that 
■the sesiiot* tratkinj took* 
^ be JSESSIOMD 



~0^«*y E S internet 
beiaiiifi there is no 
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Given: CSe^lti * l * l> 

1 . import javax . servlet . http . * ; 
£ . public class MyCesatonLiaternir 

trcqplements h t tpSes s ionLi s tene i { 

3. public void aessicnCreatedO i 

4. System. out .println ( A Session Created") ; 

5. } 

6. public void sessionDestroyed() { 

7. System, out. println (Session Destroyed").* 
9- ! 

9 - > -O^Wns A awl B art t*me.i 

Yiim is wron* «ndl thfa cbss? (Choose nil that apply.) jJje« methods iWd 

—jt hive 3n n"ttf£t iJ,e * , t' , '^ n * 

Off A. Tin- method JtigikUure >n\ line 3 is NOT com-i. parameter 

U II I hi method .signature mi line I? is NOT correct. 

O (:. Th* import &iateim'!it will NOT imparl the 1 be^^T^e^i-ta'^^^defiTied 
HttpSessionListaner frttfe ,. IA tK^uV^kV 

□ D, ses signer eated and seaaionDestr oyed itrr- N< >T I he- only 

methods defined by the HttpSessionLiBtener interface, ^Ofium £ is ihtotrtit befijw 



WhHi ^tsruents atosui mm® fM&smt ate true? (ph^ose all thai appl>?) tercet T ^ 

^ A. The return lypi- oj HttpSession , getAttzibute (String) is 
Object. 

n -flexor B i» «vt° r,rc£ ' t 

U If. Tin- return lypr.- "I HttpSession. getAt tribute (-String) i- bcta^w the rrb»r« 
V string. ^ a objtd 

JJ f ALtrihuitcs bound in in a session Lire available to anv other servlel 

that beloPK^ in tin- s : 1 1 1 l ■ - sorvietcontext mid Jiitticiii.-s ;\ reque*j 

tdefltiScd ft) bcinfl p:n't <.] t\ir same session. 

□ h (. : . 1 1 1 i n . ■ se tA ttr ibute { " keyA" , " valueB' ' > . >■ i < 1 1 i HttpSe s s ion - ^H'™ D u , 

wKUh *£, M . — for * X.vA * „„„ ,„ XgSSSSSSP 

[|| lie lllroWll, J 

□ K. (: :i Lliiiif setAt tribute ("fceyA", 11 valueB") »n .m HttpSession 

which alreat.lv hold* h mine for tin- key keyA ivil] emise tin- previous 
value Per this lie tribute Its be replaced with the String valueB . 
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Which intat&E<a define a getSessionO mcthnd? (e^rvtet ^M" ^ 

i(.!lu ii i'-. 1 1 li I . l i ■ i )K. 

O A- ServletE^queafe 

Q B. SarvletResponsc 

5^ ('.. attpServletRequQst 

Q h HttpSenrletReSpcmse 



Given .\ session object 3. and I In* rode: 
s , se tAt tribute key " , value ) ; 

Which listfiH'l 1 * t'ullltl lit- mnificd? \Glntmr unci 

□ A. Huh HttpSessionListenar 

□ IS. ll„K HttpSessionBindingListenei 

□ C. Onh HttpSessionAttriiuteListetiex 

LI S3 HttpSegsionlistener 

Line! HttpSassionBindingLis tenor 

H t tpSe 3 9 i culli a tener 
and HttpSe3sionAttriiuteL±stener 

H ttpSe 33 i onBindingLi s tener 
,ui. I HttpSessicmAttributGl/Lstenar 

□ G. All Mirer 



any W an attribute u added and Ine 
value obifd will al» be noticed if Vt 



Given dial req is ;m HttpServletRequest, which shlppett create a 
S'tisioB il one exist? (Choose ;dl thai iipplv. i 

Ef A 



req, get session [> r 

^ I ; r eq , ge t se s s ion ( true } ; 

□ (.. req.getSessionffalse); 

□ I J req. creates ess ton () : 

□ E. ieq.gGtNewSesBion() f 

□ I: ieq,creatcSeasion(truQ) ; 
G G. req . createSession (Ealse) ; 



A and B ™H eath 
create a new scjuc* if me 
doesn't e*''t ^e*t£e»ion(-falte^ 
return a mull i-f the kwob 
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Given a session object a with two attribiilea named myAttrl and myAttr£. 
uhicli u-i]l remove both attribute* from this. ge&lon? (Chcou «H that apply.) 

LI . \ . s , i-onio veAI lValuo b (J ; 
33 IS. s . r emo vgA t tribute ("myAttrl") ; 
s .reraoveAttribute PrayAttr2'' ) : 

□ C . s . remo veAl LA 1 1 r ibu t e s ( ) ; 

□ I). s.gatAttributo (" myAttrl", UNBIND) 

s l getA t tribu te { v myAttr2 " , UNBIND) 

□ I. 3. getAttributeNaraes (UNBIND) ; 



(API) 



way ta remote attributes Wo™ 

on ty or,e atbiUtc at a i*»e- 



4e* Which statements about BttpSession objecti in dimribined 
\£i environments arc true? (Choose all thai apply.j 

LI A. When a session is moved 1mm oiil- JVM io another, any 
(Htritmles ^"tftl in the session will hi- Jan. 

IJ B. When a session is moved from one JVM to anoiher. appropriately 
rqpsterril HttpSassionBindingListenar oUject!, will W- 

notified, 

ii'" G, When a session is moved fiscfW OtWfJVM la another, any wssion 
attribute implmentuii; iln HttpSesstonActivationXistencr 
interface will be notified 

19 I). When B session moved lion ]\ M in .imnltci. aiu iliun- 

value* \\\\\\ ini|ilni]i'n[ j ava . io . Ser i al i zable will be 
transferred in the new JVM. 



— Ofbwh h is intarrett because 
ienalistable attribute! be 
transferred 

-Oftipn B ii iBiorrefrt 
sinfie attributes re*** 
bound to tke «iiio n 



13 



Which statements about session timeouts are true:* 
iChoose all that apply,} 

□ V L 



?t*ilt>u Tiiilf'jHf uvCiaffiUtHiS Tiiiidr ■ r i i'ir "I") i'^iii ^| " 1 S"y" 

i inn' in seconds, 



B, Session timeoul de i- la ra lions nude in ihe 1)1) ( tin sperjfy 
limn in mnlufea, 

M C, Session timeoui deelaraiions made programmattcAlly can 
specify lime only in seconds. 

LI D. Scasi imi-om declarations made f ji xtgrammatically can 

spr. ify liinr- only in tniiiuns. 

□ &, Session limeoui del t&ratiens tnwde projTi;iium;nkalh . . m 
spetafy time in either minute* or srrond^, 



(API) 



-Ir, the DP, ^ fa 
<s(i5ton^fc»*ecwt> element only 
minutes «n be ifetified, win} 
n*t"tp£e«>on'i 

sftAlanlnattiveln-fetrvalO only 
seconds Li* be i^eti-fied- 
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Choose the servtet code fragment ihut wptttd tvirit-v^ from tin; request the vnlui- 
rif a cookie runn^rl "ORA_l M) :' t '.I mums all ihai apply.) 

□ A. String value - «qu BS t. getC«ki e (' ^OBACID") ; ^fc^d*^*^ 
•IS. String value - request, getiieadier ( "OKA U1D") ; 



if 



a C«k* a ^ e 



javax. servlet.iit tp. Cookie U cookies - 

request. getcookies () ; 
String cWame = null; - Oftitm C JF* a L*#* 

String Value = null; irX ^ T^n^^', 

if (cookias != null) { 

for (int i = 0; i < cookies, length; i++> { 
cName - cookies [i] .getHame () ; 
if (cWame !- null sfi 

eNatoe .equal slgnorecase ("ORftJfflD") ) { 
value - cookies [i ) . getValue () ; 

} 

i 

i 

Q 1). iavax. aervlet.ht tp. Cookie [ ] cookies = ... in 

if (cookies . length > 0)< » **** 

String value = cookies [0] . getValue (} ; 

J 



— ' 1 (API 3 

Wltii h tnethod(i) can be used to Lisk the container to notify yum- application 



uhnirm .i M-ssion is Bhdui to timeout? (Choose all that apply.] 

HA HttpSessionLis toner sessionDestroyed -0y»tn>n £S th* kind of r**nd-aboi*-t, 

n 

ii nLLp»Bssiviuiiiiui]iym3Leue£ . miueDvuuu j — ' — -_ - r ~ L 

m a nil xo be s to^ewt 

J£l l. HttpSessionBindingListener , valueUnbound " ' 

□ D. HttpSeesio^injdingEvent.sessionDestroyed ~0?t»nD ! ^ B,e 

□ i; HttpSessionAttributeListeneE.atttibuteReiftoved 'f^T^i'^^^c! j 

□ II HttpSesaionActivationListener. sessionHillPassivate - lolk ^(out 
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modt Answers 



16 



Hfrtx tvnultl Vrni nSfi OK HttpServletRasponse f>hjec1 in ;i S«vtet Ir » ;ic!fl A CQqjtK lo thr (^pj) 

dfcnt? 

O A, <cajii text-pai jiu> 

<par am- name>niyCookie< /par am- name> 

<param-value>cookiGValuQ</param-value> , ^ tfauSC 

</context-param> ^0^'* * IS , 'SlldU^ * 

□ B. respons e . addCookie ( vv myCookie" , " cookieValue " } ; the ^^"^i ^ Stn^S* 

rif.C, javax.aervlat.http, Cookie newCook = 

new javax sarvlet.bttp. Cookie ( "myCookie" r ''cookieValue") ; 
//...set other Cookie properties 
response - addCookie (newCook) ; 

□ L>. javax.servlet.http. Cookie [] cookies = request getCookies () ; 

String cname - null : 
if (cookies 1 = null) f 

for (int i - 0; i < cooties . length; i++H 
cNnme ™ cookies [i] .getName () 
if (cNaroe 1= null a 

cName , equals IgnoreCasc ("myCookie") ) [ 
out.printlnf cName + " : " + cookies [i J . getValue () ; 

Given: CAPP 
1/ 13. public class ServletX extends HttpServlet ( 

14. public void doset(HttpservletReguest req, HttpservletResponse 
rasp) 

15. throws IOException, ServletException ( 

16. HttpSession sess = netf HttpSession ( req) ; 

17. sesa.setAttributeC'attrl", "value 1 '}; 
is. sess . invalidate {} ; 

19. String s - sess . ge tAttribute ( "attrl " ) ; 

20. j 

21 . } 

What is (In- rctutt? (Choose .ill thai apply] 

A. Compilation ikils -Offc* A: 6* I* * Y» *V** » objett l>*t 

□ C. Tin- value of s is 

□ D. An IOException is LbttMWa 

Ll U. A ServletException. is thrown 

□ K An IllegalStateException is ihcmvn 
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Being a JSP 





* 

i w' 



f X 




A JSP becomes a servlet. A servlet thai you don't create The 

Container -auks, aL your JSP translates it into J**£ Source Code, and compiles 

it into a full-fledged Java servlet class. But you've got to know what happens 
when the code you write m the JSP is lurned inlo Java code You can write Java 
code in your JSP. but should you? And if you don't wnte Java code, then what 



, we'f 




■ and. yes, us 

syntax You'll learn how. why, and what to write in your JSP. Perhaps mgre 
importantly you' I! learn wtial no! to write in your JSP. 



is p new chapter 2Q1 



official Sun ejram objectives 



The JSP Technology Model 



Coverage Notes: 



6.1 Identify, describe, or write JSP code for the following 
elements: (a) template text, (b) scripting elements 
(comments, directives, declarations, scnptlets, and 
expressions), {c) standard and custom actions, and (d) 
expression language etements. 



Mosi u contnd fti tkii ilittftfi-t. hut flit- 
detail, helund fc) Stamford and custom 
tcHpHSk <™<{ i'U txpftftitot language 

eltmrnts are CODttta rn later chapters. 



6.2 Write JSP code that uses ttie directives: (a) page (with 
attributes import, session. contenlType. and isELIgnored). 
[b] include, and (c) taglib. 



The pag? ttireetk-e it ttwettd in tlm tlwpttr. 
hut include nmi ingliii are earned in later 
< imp tern. 



6.3 Write a JSP Document {XML-based document} that uses 
the coirsc! sytv.ax. 

6.4 Describe the purpose and event sequence of the JSP 
page lifecycle: (1) JSP page translation. (2) JSP page 
compilation. (3.) load class. (4) create instance, (5) call the 
jsplnit method. {6) call the JspServjce method, and (7) call 
the jspDestroy method. 



Jjfot eneneJ here; refer to the ehnptrr ott 

Deployment. 

All eovertd in this chapter. /Hint: these it'ill 
he stmt *>f the mast iw-lirainer QVtstiitoi 
n» tht rent txom. una nm'. learned the 

fundamentah in this rtinpitr./ 



6.5 Given a design goat, write JSP code using the appropriate 
implicit objects: (a) request, (b) response, (c) out, 
td\ sessson. (e'\ confia. fft aooli cation. ta \ oaoe. fh> 

1 " r - • ■ ■ 4 ■ d - - - * t r - ■■■ jr - — — - ■ i-*fJ |- — *r - 1 ■*■ ■ f 

page Context, and (i) exception, 



All a.rrrr/t >ti tht) ettfiptn, although yfilt'n 
fXptcttrf to ettrrudj knaif a-hsil mv.U nj them 
mean hased on the prceinUi lie* chapters. 



6.6 Configure the deployment descriptor to declare one or 

more tag libraries, deactivate the evaluation language, and 
! the senpting language. 



6.7 Given a specific design goal for including a JSP segment 
in another page, write the JSP code that uses the most 
appropriate inclusion mechanism (the include directive or 
the j$p:tndude standard action}. 



lie rover rvrrtffiiug here except iter luring tug 
iibraiies. TituCs. covered in the chapter \>n 

\ut (rierre.it htTt; ftjer tu the nt\i ehiiplet 

fSmptUss JsPi). 
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using JSP 



The most important pomt far 

this chapter Is simpty: 

role does your JSP code play 

in the final servlet class? 

in other words, whore do 
the elements in the JSP end 
up in the source code of the 
generated servlet? 



In the end, a JSP is just a sgrvje t 

Your JSP eventually become* £ Full- fl<d ptcj msvIw funning ij ■ j*aw 
web app Ii'-i a lm like any other servlet, exeepi thai the servtai daw 
is wriuen Jitf ytni Ijy ihe Container. 

The Container Cake* what vim Ye written in ymn JSI J . iruusluiex ii 
into ^ servlei yhofS source (Java) lilt. Thru mpiles [hat in'" ajiava 
siTvlt'l J" t;aH-s. Alter Mini, it*>ju$l scrvkita all the way down s and the 
servlet rum ill exactly the same way ii would if you'd written and 
compiled (the code yourself. In other words, tin.' Container loads the 
servlet class, i(lf.lililliiin^ jud niiliiili/es it. makes ;t >eparaic din-ad 

I'.., e* h request; and caflj the servlet*? service^ method. 




Some of the questions we'll answer in thi* chapter include: 

► Where docs each part of your JSP file end up in the servlcl SOUtf < 
iihIj'.' 

^ Un Mm have access to die "scrvletness*' or your JSP page? 
For example, does a JSP have a concept nl a Kervlcri-'rinbg or 
SenfcConteKt? 

^ Wl till art ill*' types of fleittentil V 1 " '"<tn I 1 " 1 ill ^J^P? 

► U lull > the syntax for the different dements in B |S|' » 

► What's the Liiec\x:3e of a JSP, and can you step into die middle of it? 

► H',W i In the dillenitl r-l«-nu-m> ill aJK| J interact itl ihe lilla] servlet? 
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making a JSP 



Making a JSP that displays bow 
it's been accessed 

Pauliur vviinfn in use JSP* in lu-r wdS Hlftc'i rtalfy S&\t of 

wriling HTML into a Bipiyltrt PririiW'riii-r printing. 

S1h l decided In k-arTiJSP* In nuikiiisj ;i simply dynamic pagt thai 
]>rinl^ ihc nunilirr of time* the piigc tlCH In'fTi requested. Sin* 
understand* thai you can put regular old Java code in a JSP using 
a scriptUt which just means JhvS code wftJiiji a <% %> 





BasicCounter jsp 



<html> 
<body> 

The paqe count is! 
<% 

out .println (Counter .getCount () J ; 

</html> < M A „ SL Visa 




Counter, ova 



package foo; 

public class Counter I 

private static irit count; 

public static synchronized int getCount () 

counts fi 

return count t 

1 

fctfor fib* 
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using JSP 

She deploys and tests It 

It'* trivia! it* deploy and te&t, Th<- <mlv Dicky i» nrafciiit 
siirt* chin ilit- (Imimrr <:|;iss available W ihe.JSR ;mrl r li.n \ 
C«s) |ust be sure ilie Counter cfat*s i* tn ili^ WEB-INF/ 
claims directory nj' the web app. Stie accesses the JSP directly 
in lln. brmvscr al: httplWlOCalhostiaOBOrte^tJSP^askCoUnter.jsp 



What she expected ? 




iii:":.- 1 !: •» 



°* *»>» web dpp. 



Put tv* <? atfcjy 

(Mi web aft wll b* 
able b> ite it 




What she got: 



oar: 00 



HTTP Status SOD - 



The serve? encountered an internal error f) that prevented it from fulfilling ttiis request. 
^^J^J a-g ap«he jasper JasperErceplion Unable to compile class lor J3F 5 

An BfTOf occurred at lino: 1 m the pp filo" iBasrcCountar.jsp 
Generated setvtet wot 

Ijavac} Compiling 1 source ills 
IMwwMBlhyiAptJ ^ ^ f/org/ 
flpache.']5^'Ba9icCoyrneu5p.java:4S: cannot resolve symbol 
symtBl 'variable Counter 

l« a b«i: class ora^pacha.jsp.hasicCounkflrjBp ? 
oul.pnnK Counter oetCountO J. ^ ^ fty* *<t wUat s ^ 



1.:-' 



orc.apachc 5;per ccmrj er jetaultEfrcil^aHKicr.jav:xEiTOf:Dtfaul£ 

ctg apache ^percomplerEmwQst^*^|av^ 

org apache jasper compter Compiler gcneraieClasS(CcmpilM (ava.4 1 5) 

erg .apache ssper compiler. C<OTpitecorrple(Cejmpiler.jam453) 

org apache ^pacorr^.Ccripilet.compile(Compilfir^a:439j 

erg apache ,3spef JspCompilabonConlEjd corrpilei^pCcrnpSalionCcnfert.jara 5631 

erg apache.psper servtet JspServIe Wrnripef.servicefJspServfel^ ) 

erg apache ^ispor sorvtet.JspSorulet.servicoJspFilev JspSarvlet.jaua.301) 

erg apache.psper.servfef JspServlet ser.'iceiifepServlet java 2+S; 

iawax.se rvlei.http.HtSp Servlet.se rvtca(HnpSarvtet.java:8Ei6) 
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page directive import attribute 



The JSP doesn't recognize the Counter class 

The Counter dass is in th< tftopw bage* &ut tJwre 4 * Rttthutg hi theJSJ* 
in acknowledge that, ti's i!k same <hinn rliLii happens in you wiih any 
other J.iv;i [.-[.Kle, and you know thr ruh L : ■ ri i] >■ *n ihr packa^*; in 1 usr rite 
fully-qualifirtl dass name in your code. 




package foo; 

pablit class Coant&i: I 

private static int count f 
public static int getCountO | 

count + 4- ; 

return count f 

I 

J 



out.prirjLltL [CountBr.aatcout.it [) i j 

JSP code should be; 

<<i ■ 1 j 1 ,prial !r, ff 00, Counter. 1^1. ) t 
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using JSP 



But yfl-U CAN put 
import statements in 
o J5P ycu just r,eed 
q directive. 




Use the page directive to import packages 

A <tittctivr i* h way l<»r ytiu I" give !*pe<ial iiritnuliiui.'i |p die Container 
at jjjagc tfaaalntic-fl lime. Directives nunc in thlfcc flavor*! pag?- inrtmlr. 
and taglih- We'll lunk at the hiclnde and taglih directives in laser 
chapters. Inn (bp now all we care ab<jut is the page directive, because it T s 
the one that lets yon bttfitrt 



To import a srngfe package; 

<%@ page import="foo. *" %> 



<htitil> 
<taody> 

The page &Otmt is: 
<* 

out. println. (Counter -getCount () ) ; 

</html> 



3 „ impor t "a&ri ktc- 



To import multiple packages: 

<%@ page jjnport="f oo. * , java .util , *" %> 

u„ at Lati-«^ti, e? ^5« r 

Nmiee wbfttYdUTejtttl hetween the Java rude dial prints the namicr 
and Lite page directive:' 

The Java nule is between angle brackets with percttll signs <% and 
%>. Hut the directive adds an additionid character tc. (be start of the 
element — tlie (3! sipi! 

// row ,i» JSP fmif tttttt xhtrli with <%(5'._)Tir/ kmm) it's it ttimtisv, (We'll get 
intn imnv details alnml the pan*' directive later in die \uu>k.) 
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using expressions 



Put then Kim mentions "expressions' 

juiti when you thought if ws£ ^?if*s Kim netted (hue (scrlpitoi 
with an oucprintlnQ statement This isj5R Colts. Pari of ihr- 
whole point of JS£ i* to printing That's why there 1 * ft 
JSP n\/irrssitin eltnjeat — ii iuiiujnatk-alLy prims out whatever 
you put between the tags, 




Script Jet code: 

<%* page import too. ** 

<html> 

<body> 

The page cQunr is; 

<% ou t.printl tit Counter go tCountf) } ; %> 

<7body> 
/ht ml : 



Expression: code: 

<%e page import^ Ego. *> 

<html> 

<bejdy> 

The page CLiurtt is now: 

<%= Counter , getCount 0 %> 

/ri-i.|y 

■ /titJiii • _ ^ ■ it » - i * i don't 



Notice wh<tt * difr<'i'' L iit fx'i u (-<ti 1 1 1 l- i<ir 1 1 1 1 - tenpttet 

Midi* .mil I lie I hit ir»r the express inn: 1 Tin- .unplifl rndr* is 
between angle bruciicts with percent signs; <% and %> 
But the iXpmsion adds n.n additional character to the start 
of the element — an rqun/i mjjii (=\ 

So far we've seen three different JSP element types: 

Scrtptli tl <% % > 

Directive; <"'»{ti' "«> 

Expressions <%s= %> 
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using JSP 



HELLOl If yieu'r^i gonna tell us 
how's Improve cur wde, you 
tpuld (A 1 LtAS'l get the Jewsyntp* 
nght... there's no frickin' semicolon 
at the end of that expression! 




<%= Coun te r . ge tCount f } t > 

Expressions become the argument 
to an out.printtJ 

In Dthfl' Wurdi, tin- {jtJtHaitlc-r lilkc-S tnotttiti^ Vutl IVpr ItelWi'i n 
tilt" <"•;>= Llixl :iiu! |"Hs il ru ;l> 1 1 ■■ .n ■gUOltlfl t" ;i 

rtfctiuttcjti iluu prints i<s tin- implicit respowc PriaiWrftc* wi. 
When the Container sees this; 
<*= Counter . get Count ( ) %> 

It turns it into this: 

out. print (Counter . getCount () ) . 



If you did put a semicolon in your expression: 

<3= Counter . get Count ( ) ; %> 



That uunujrj hf? h^rt. it uuriuiri me 31 

out . print ( counter . getcoun t ( } ; 



NEVER «tid an expression with a semicolon! 

<%— never PutASemicolonln Here %> 
<%= becauseThislsAnArgumentToPrintO %> 



yai/ arc horo t 2B9 



expressions and page directive 



0} 

Well, if you're juppoied to uic enpreniQiij 
INSTEAD of putting oUt.printlnO into a script Jet, 
then why is the irnpMdt "out" there? 

A. 

Xi* You probably won't use the implicit out 
variable from within your JSP page, but you might 
pass it to something else... some other object that's 
part of yourapp that does not have direct access to 
the output stream for the response, 

Q,* In an expression, what happens if the 
method doesn't return a hy thing 5 

Ai 

t\. Vol' l| get an enorJJ You cannot, MUST 
MOT use a method with a void return type as an 
expression. The Container is smart enough to figure 
out that there won't be anything to print if the 
method has a void return type! 




Decide which of the following expressions are and" 
are not valid, and Why. We haven't covered every 
example here, so mafce your best guess based 
on what you know about how expressions work. 
{Answers are later in (hi? chapter so do this NOW } 

Valid? (Check if valid, and if not, explain why not) 

J <».i,= 21 %> 



□ <%= ((M:Lilu:Liiti.Uii<: + .1:**; %> 



0' 

i^t Why does the import directive start with 
the word "pag e" ? Why is i K%<fl page i m p ort...%> 
instead of just import... %>. 

A: 

x\ Good questionl Rather than having a whole 
big pile of different directives, the JSP spec has just 
three JSP directives, but the directives can have 



inn iijiutfi. mim you tdiieu nic unijuri unci. Live i> 
actually "the import attribute of the page directive". 



What are the other attributes for the page 
directive? 



-J <'(.,= M.nh.i'AtHl(sni() ^> 



-J <%= Snitijf s = "loo" %> 



J <%= new stFjtoeEsj "<■> 



J <%= 42*20 ?■»> 



A: 

* Re m em ber, the page d i reel ive i s a b o ut 
giving the Container information rt needs when 
translating your JSP into a servlet. The attributes we 
care about (besides import! are session, content- 
Type, and isf; Honored (we'll come back to these 
later in the chapter). 



□ <%- Fate %> 



-I new Couiitei'O %> 
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using JSP 



Kim drops tha final bombshell,. 




Wihat she tried: 

lil. mi 

<body> 

<S int count-0; %>, 
The page count is ngw; 
<%= ++count %> 

< /bndy> 
< /html> 



Will it comp.Jt? 
Will it work? 
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scriplleT variables 



Pedaling a variable in a scriptlet 

Tlie variable declaration is l>m it didn'i quite work 
the way Pauline liojirrt- 

What she tried: 

**ptfef " bc ly> ^ Pedlar* ihe 

T*t** <i int count-0; %> <^ 

The page count is now: 

^ <%- ++count %> 

-,fnil-- wa-jiUL , j , , 



What she got the first time she hit the page: 




What she got the second, third, and 
time she hit the laaoe: 



The paee count is: 1 



"I" 
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What REALLY happens to your JSP code? 



using JSP 



You writt s JSJ?, tout i' tawHsa a utrvleju lh'- only w&y to w&Oy tM| 
wli.ii's happening is u? look ai whai tin- Container docs w tout JSP 
code. Tit other words, bow flo^s tiu- Container iwrtifot? your JSP into 
(t servlt-S.' 

Oim- ymi kiion hIm'ic dill'iTi-m jSPekmcntJ! land in the snvlrl's 
class tile, you'll lind il inuth easier to know how lu structure ywurjSE 

Thr sorvlcl code Qti this pnfp? is not the real code g^e-ratcd by 
[he Container — wc simplified it dawn lo the csrscnliiil parts. The 
Container-generated jervict lile is, veil, tigiin. The real generated 
servltft source rude is slightly harder to read, but we will look at the 
real thing in. a T«v pages, for now; (hough, ;ill Wt can' almm is p tol 
i» the servlcl class our JSP tude ai lually ends up. 



This JSP: 



this servlet: 

public class basicCn<mter_j sp extends SomeEpecialHttpServlet ( 

public void _jspService (HttpServletP.eijuest request, 

UttpSejrvletRespijriiifc reaptuiuu h tlitowx, j ava . iu . lOExcaptloii, 

ServletExcep-ti'iin I 



<btjql> <Body ■ 

<% int count=0; *> — 

The p^gB count ia now;. 

<%- -H- count %> 

■■ j h ody > < /h fcw 1 



PrintWriter oat ■ response. getWriter ( ) 
respgn^e.eetCpntentType ("text /html") / 
out. write <"<ritJiil:>*body>") t 
int count=0; 

out. write ("The page count ia now;"); 
out. print { ++eount ) ; 

out. write P<7body ></html> w t ; , ^ ,*t< 



ALL scriptlet and expression code 
lands in a service method. 

That means variables d*clar*d in a 
scriptlet are always LOCAL variables! 



Note i-f yo* want to see the generated levvlet tode -fro™ Tomtat look in 
fThe wnded.wd p*«<* will ifcange depend.^ on yaw sy^eVaTT^ZTweb aff) 
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JSP declaration 




We need another JSP element 



DwhiriiLg the conn I variable in a -s-L-riptle?! meant that the 

a\ i.i 1 1 It ■ reiniliali/eil i-.u h lime die Miviee tnrihinl i .in. 
U'iiii I ;n i- it zi'HA- remit t<i 0 ii itli fiufi request. Wr 

need (<i somehow make ruunl an instMCt variable 

So liar we've looked .11 directives, serij>dets, and r^precitan* 
Directives air lor -ip;™! iii$iruct$OO0 10 the Ctiriiitlrk-r. 
mrriptlets nv jusi plain oltfjiiva linn Luid^ as-is within 

I il . m.-Iii | .1 I. •: I -.. ivli I - .1 H : 1 1 H I 1 1 1 >i I . ,1| I'. I ill t'l'Ulll ' I 

an expression always hecomes the argument lu S, printQ 
But there's another JSP clement culled a declaration. 



<%! iat cotint^O; %> 



Put 



r 



NttP *M ******** 



, JS|* dei laratimis an- fiir rWlai \ng in< mbert of ihr 

gWSeratlB^ Wrvlel elttflth That mfavts bttih Ttif'in h /,-.-,■ aittt 

msttkods! In other words, ;m\ ilnii^ bcUvrcn die <%! and 
%> \a% is added to the class autsidr the aervicc meLhod. 
That means you can declare both dLatic variables unci 
nirlljmk 
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using JSP 



JSP PeclaratioMS 



A JSP (tedstidWion always defined fari/h the titva Imi vvHiitt the service {w 
;tny [iihiT incihcirl. Ii's th.ii ^implr declaration* art' for static and instance 
variables and rut-i Inuls- (In theory, vi's. you could define other members 
including inner classes, bui 9&99$&% of llie linir you'll Use declarations for 
mclhodi* and variables, } The code below *ab%s Pauline's problem; BOW ihc 
counter keeps incrementing eaeh time a client requests the page. 



Variable Declaration 
This JSP: 



^littiilxbadyi 
<%! int count^O; h>- 

The page count is now: 

++count 4> 
</hcdy>< /html> 



Becomes this serviett 

public class basieCounter_] sp extends SajiieSpecialHttpServlet | 
int count=0; 

pub 1 ic void _ i a pSta rv i ct> ( kttpSts rv LetitcqQt*s t r o j 'J r.- -j t , 

KttpServlet.Responne raspnnseM.hr^w-v java. ia. lOException I 

PrintWriter out - response. getWriter {) ; 
response. set Con tent Type {"teat/html") t 
out .write ("<html><body>") ; 
out. Write (*f be page eDunt is now:")j 
out. print ( ++count ) ; ^_ 
ciut .write rv/h-v.iy >■ /html ." \ ■ 



1- h*»*wf*j8 



2 1 variat ^ 



Method Declaration 

This JSP; 



Becomes this servlet: 



<html> 



public class basicCounter_j sp extends Sc-tneSpecialHt tpServlet ( 

juft t^ e 

L«ujl IT Itl 



int doubleCount 

<*l int doufclecount (} { X' ™ un1 " = nn " 

count = county Mturn C ° Unt j, 

It i J** 



return count; 
1 

<efcl int count=l/ %> 
The page count is now: 
<%= doubleCount (j %> 
</body> 
< /html> 



to < Tta-wjRI&ja' 

int eount=l r - (4ee|ft^ fa ,*n*bl e AFTER yo. u«d £ ,„ a JJtiwd* 

public void JspService (HttpSeivlQtRoqufiGt request, 

Httpilervle'tRespciaae response) throws jci% T a,i<j . IOException [ 
PtlntWrltfer uut » resporise.qetWrlter () ; 
response. setContentType {"text/html") ; 
.Ml .v.- jt=p -html body ■") ; 
out .write ("The page count is now:"},' 
out. print ( doubleCount ( ) }t 
out. write ("</ body ><7 html >*j t 
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the generated servfet 

Time to see the REAL generated servlet 

Wc'vt ]mt?a looking a\ ti super-;! impl ill t?d version of I lie &e?$te{ the 
CnrHiiiiici m tiullv 4 UMirs firnii your |S1 J There's no need to |nn|, .m 
thf' CofltajflCT'B'JflfiTBtwI code durm*: clewlopriieni, l>ul yon <an tiw 

il tm 1 1 4 1 1] j Irani. ( line Son\e -ii-i'ii VvImI I he Conlainer f|iir*s WjtJl dir 

dilTr-i t-ni cJciiicnis nf .1 JSP you sh>wldin ctecd to ever look .n die 
Container-generated Java source files. Some vendors woivi W you see 
thf generated Java source, and keep only the compiled ,elass Kct, 

Don'l be intimidated when you see piirts of the API thai you don't 
recognize. Most ttf the class and interlace types are vendor-specific 

implementation* you shouldn't rale about 



What the Container does with your JSP 

► Looks at Lho directives, for information it might need during translation. 

► C reates an Htlp Sen/let s ubclass 

For Tomcat 5. the generated servlet extends: 

org . apache . jasper , runtime . HttpJspBase 

► If there's a page directive with an import attribute it writes the import 



For Tomcat 5, the package statement {which you don't care about) is: 
package org . apache . jsp ; 

► If there are declarations, it writes them into the class file, usually just 
below the class declaration and before the service method. Tomcat 5 



► Builds the service method The service melhod's actual name is 
_jspServicir 0 It's called by the servlet superclass' overridden 
service( } method, and receives the HttpServtetRequest and 
HrtpServletResponse. As pari of building this method, the Container 
declares and initializes all the implicit objects (You II see more implicit 
objects when you turn the page ) 

► Combine the plain old HTML (called tern plats text) scriptlets and 
expressions into the service method, formating everything and writing 
it to the PnniWnter response output. 




There's llttie on the 
exam about the 
generated class. 

We've been showing 
generated Code £0 that you 
can understand how the JSP 
'■ is transited into sen/let node. 
\ But you don f need to know the 
\ details about how a particular 
\ vendor does it. or what the 
i generated code actually looks 

■ Me. All you iieed to know is the 
I behavior of each dement type 

: (scriptlel directive, declaration, 1 

j etc.) in terms of how that 

: element works inside the ] 

■ generated servlet. You tteed ■ 
i to know, for example, thai your \ 
I scrspilet can use implies! objects. \ 
\ end you need to know Ihe 

I Stuv/ef API type of tJ>s implicit \ 

i objects. But you do NOT need j 

r to know the code used to make \ 

1 those objects available I 

: The only other thing you need : 

■ to know about the generated i 
: code a<e the Inres JSP : 

+ 

: lifecycle methods: jsptnit(}, 

\ ispDestroy. and JspServiceQ. \ 

I (They're covered later in this 

\ chapter) j 
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Tomcat 5 generated class 

package org. apache. jsp 7 
ijnporc 1 avax .aervlet . k j 
import javax.servlet.http.*; 
import javax.servlet . ji>p. *; 



*html><:body>* 

<%l int count=G ; |> 

The pagfe count- is howt 
<%= ++count %> 
<ybadyx/ht!fll> 



int count=0; 

private static java pistil .Vector 



_jspx_depenclant5; 



public java.util.Iiist getDependants ( | 
return _jspx_dependantB; 

) 



public final class BasicCountex_jap extends org. apache. j asper.rTjntirae.HttpJspBaee 

implements org .apache. jasper .runtime. JspSourceDependent | 



public void Jsp&erv±<»{HctpServletKec]uest request, HttpServletResponse response) 

throws Java, io. J OEx caption, ServletExcept ion I 

JspFactory _jspxFactory - null; 



Pageccntext pageContext = null; 
HttpSession session - null; 
ServletContcxt application = null; 
ServletConlig coniig - null; 
JspWriter out = null; 
Object page - this; 
JspWriter _jspx:_GUt = null; 
PggeContext _j sp* _nagt=i_ccintBXfc ** null; 



try I 

_jspxFactary * ff^Factary.getDef aultFactory ( ) ; 
response. setContentType ("text/html") ; 

pagecontext = _"ispxFactory .getPageContext (this, request, response, 

null, true, G192, true); 
_jspX._page_cofjt.sxt = pageContext I 
application = pageContext .getservletcoritext ( ) f 
coniig - page-Context . get-ServletCcmfig ( ) ; 
session = pageContext . getSession { ) ; 
out *• paraeGontext .getOut (1 ; 
_lspx_out = out; 

out. write ("\r<html^\r<rbody>Sr") ; 

out, write ("\rTne page count is now: \r") 1 

out .print ( M count ); 

due .write ( M \r</bady>\r</htmi>Vr") ; 

\ catch (Thxowable t) [ 

if Hit instanceof SkipFageException) | t 
out = _jspx_out; 

if (out 1- mill 55 nut.getBUf ferSize{) !- 0) 
out .clearBuf fer () ; 



it t*-«i to run ird output 
your JSP HTML, rtnftH **A 
cupineiiiotfl tode 



Of 
m 



if (_jspx_paye_duriLaxt != null) _ispx_page_conLext.handlePageExcefjti<in (t) j 



} finally { 

if {_j.5px Factory !- null) 



JspxFactory. reieaeeFaxreContext i_ j.<;p;<_page_ct.ntext ) f 
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JSP implicit objects 



The out variable isn't the only i mplicit object ,,. 

XVI i. -i i ,t ( Iiiiiialncf translate* ihe JSP ana a sctvlet, thr bf^iiiniiin of the 
' i< <■■ •Afi\ i- .1 |>:l> nl implicit uhject ilr-«-|;iriilMirW Mid .iSsigumnirs- 

itnptictt objects, yva i tm writ* JSP knovi-in^ that your <<>de i* fifing 
ut be ]Kiri til" ii sm lct. In oiIht words, ymi cm rnke advantage <i| ymrr 
«tv1c1iicsi>. rvt'ii tlKuigb yimVf not ilwfih « iiiintr a icrvkf class yourself 

Thinlt baei w chapter* -!. 3, and <»- Wfcsn were some of tin; important obje< i- 
you U*ed? Hrm did your serv!c( get scrvlel mil parameters? Etc* did ymi 
scrvlet get context mil parameters? Hrav did your scrvlet get a session? 1 1' W 
did your scrvlet get the parameters ttlbmitted by the client in a form? 

These arc jtfyl a Few off (he realms your JSP tnij^hi n«fil in u*r some <>| what** 
available to -i servlcl. AIL nf (he implicit object? map in something from (.lie 
Kervl-ei/ JS| J AM I hi- irqvsst implicit object) lijr example, is a reference uj the 
HttpServfotReqnest object passed Id the service method by the Cunljnn-r 



API 

JspWri ter 
HttpServletRequest 
HttpServ let Response 
HttpSession 
£3erv let Context 
£ervletConIii.| 
Throwable 
PciqcContcxt 
Object 



in 



I mpl icit Object 

_ revest ^, f#**£ wW". 

.response ^J^\tX^ ^ 

session ^^eCwte^t- 

_ appl i cati on ^ -„ T u,l .tj.lt » *»j * ^ 



Gonfig 
exception 
page Context 



What's the difference between a J»pWHter and a Print Writer I get from 
an HttpServ let Response? 



The JspWriter is not in t heelers hierarchy of PrintWriter, so you can't use it 
in place ot a PrintWriter. But it has most of the same print methods, except it adds 
so me buffering capabilities. 
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BE the Container 

Laoh uf tin- listings is Troni a JSP. Your 
job is io figure out wliat will happen when 
the Container tries to turn the JSP Into 
a servlet. WlD the Container be able 
^ to translate your JSP into 

U'ga-J. compilable servlet 
eode? fl" not. why not? f r So, 
J^SgT^^P what happens when a ejieni 



using JSP 




<htnt] ><body> 
Test script let 3 . . , 
<* Int y-S*x; %> 
<% int n=2f f> 
</body.><:/hLml> 




<ki page Jjnpeitt=*java.utll . *™ %> 

<html xbody > 

Test script lets ■ . . 

<% AxxayList list = new ArrayListOf 
list. add (new String (™foo"l t ; 

<%= list. get (0) %> 
</body></htuil> 




• lit i ll • 1 1: iv 
Test scr lptleta . . . 
<c%L mt x = 42 f ^> 
<ft int x - 22; ^> 
<%= x 

</body></htuil> 
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JSP exercise 

Mock Exam Magnets 

Study Die scenario {and everything else on this page), then place the 
magnets on (he JSP to make a legal file that would produce the correct 
result. You dont nave to use any magnet more man once, and you 
won't use all otthe magnets This exercise assumes there's a servlel 
(which you don't need to see) that takes the initial request, binds en 
attribute into the request scope, and forwards to the JSP you're creating 

(Note: we catted this "Mock Exam Magnate' Instead of 'Code Magnets" because 
the exam is FULL of Drag and Drop questions like this ore i 




Design Goal 

Create a JSP that will produce Ihhs: 




The three names come from an ArrayList 
iequestaffr/(Me called "names". You'll 
need to get the attribute from the request 
object. Assume a servlel got this request 
and ! 



The HTML form 

<httn]xbgdy> 



<form met hod=" POST" f w \ i^. - nu tst 
action="HobbyPage . do" > the JSr rt 



<select naj3ie-"hobby" size-"l"> 
■£optiun>tior£t? skiing 
<ofition>extreme knitting 
<option>alpine scuba 
<opt±o-n>3peed dating 

<brxbr> 
<center> 

i tnpnt type="3USMlT""» 
</ center > 
«c/f omi> 
</body><7htnil> 



The text "exueme Knitting" comes from a 
form request parameter You'll need to gel 
that parameter from your JSP. A servlet will 
get the request first (and then forward the 
request to your JSP) but that doesn't change 
the way you get the parameter in your JSP 



Important tips and clues 

► The request atlnbti le is of lype 
java.ulal .ArrayList, 

► The implicit variable for the 
HEtpSetvletRequest Dbject is named 
request and you can use it within 

S\J ipHEEL! Ul Cf.fi; GLjSIL'l L'LI ■■'j-' HUM 

directives or declarations Whatever 
you can do with a request object in a 
servlet, you do inside your JSP. 

► A JSP s se rvlet method can process 
request parameters, because 
remember, your code is going to be 
inside a servlet's service method. You 
don't have to worry about which of the 
HTTP methods (GET of POST) was 
used in the request. 
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We've put a few lines in for you. The code you put in this JSP 
MUST work with the cose rhal s aiready here. When you're 



using JSP 



done it should be compilable and produce the resuHl on the ^VL U J* • 

opposite page (you fimsl ASSU ME that there's already a wort;- M 1 * O pt* olia * 

tog servtet thar firsl gets ihe reqwsl, $9(s the requesi attribute This i s SS^ I** of * he 
squesllo this JSP). _-r4se. lt ' s ** j-n! 



names and rewards ;he rpquwsl It! this JSP, .-..cp. 



The frien-ds who share your hobby ot 



are: <br> 
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exercise answers 



BE the Container 

AnSWtJfS $2 is straightforward and works SI is a fundamental Java 

language issue (using a l^nal varanls hefnrfc it's rlwlarwl), anri 
#3 also demonstrates a fundamental Java tonguage issue— what 
happens when you have an instance and local variable wiih ifre 
same name. So you see... il you translate Hie JSP code into 
servlet Java code, you'll have no trouble figuring cut ttie result. 
Once your JSP stuff is inside a servlet. it's just Java. 



<html><body> 
Test sCrtptlets. 

int y=5+x; %> 
<% bit x=2f 4> 
</body5</html> 



This won't MofUei It's e*tftly 
like wntmg J method with 

void focO { 

mt y — 5 + *, 
wt * — t, 



\ 



You're ttrym* -to us* variable V 
BEFORE rti deWd TKe 

Container iMOn't bother- to reJrrdhJe 

the ordev of y« r nutlet todt 



© 



page impart-'"java.util,*'* *> 
<htnilxbody> 
Teat scrriptlets . . . 

<% ArrayLiat list = new ArrayList I ) ; 
list. add (new Str Lng ( tt f od"} j j 

i> 

list. get (0) t> 
t/bodyx/html ■ 



Test scriptlets... foo 

fj» woble^i print* t^e 
firit objett h 



<htmi 
Test 



■:body 

Test scriptleta . . . I0CJ ' "arable V ffc^i 

<»= >: ^ F H "t tl>e fm^^ 

</bndy:>-::/htmJ > X * ^2J iu^^ £ , '* 



Sal** wS5? 
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Code Magnets 
Answers 



H your answer tmks a liltie different, bul you 
still Ihink rt should work-try it! You II have to 
make the servlef (hat takes (iie form request, 
sets an attribute, and forwards (dispatches) 

ihe requesi to the JSP 




V\fe wed the iwifp r fe P a^r dnfrtivt 
beuuie of fWayLijt Jnd IteraW 



The friends who share your hobby of 




are; zter> 




Iterator it = ai . iterator 0 ; 




£t*~t 3 icriptiet *y kre 
<nd it Here 



<% I *> Fi™iVi tlie *Me bU>£k ' (If ye*. 

Jttyt tM it won't £«r r ile) 
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valid and invalid expressions 

A comment.,. 

Yfe*, you &m put comments m yoxu 
,[SH If you're a Jjivri programmer with 
very little HTML ejEpefieiiee-, po.u 
mlghi liru! ynirscli' typing: 

// this is ,i [-cnmiM-111 

withoul in inking twice. Bin if you 
dc.», tlicn unless ii's within a srripllet 
or declaration lafy, vwi'll cod tip 

DISPLAYING ih thedieiJt^ 

part ot the response hi other Wordj^ 
to ih*' Container those two ulawes tms 
jusl nwwe template text, like "HeBo 7 * nr 
'Ennui is;". 

You rati pui two diliertnl types of 
comments in JSP: 

► <\» HTML comment --> 

The Container jus-l passes this straight on 
to the client, I 
it as a comment 



► c%~ JSP comment -%> 

These are for the page developers, arsd 
jusl like Java comments in a Java source 
fife, they're stripped out of Uie translated 
oaoe. If vou're Ivdna a JSP and want to 
pul mi LL'ir.mtnli dbGul what yuu iy doiriy. 
the way you'd use comments in a Java 
source file, use a JSP comment 
If you want comments lo stay as part 
of (he HTML response to Ihe clteni 
{although the browser will hide them from 
the clients view), use an HTML comment. 



- Sharp 



pen your pencil ■ 

ANSWERS 



Valid and Invalid Expressions 

valid? 



4 



All primitive literal* are f'me 

<.%=■ ((Math. rand onu) + ^)*% 



M# The ic»i£olon Ur't be here 

<%= "27" %> 

String IKacrd b £ne 



5 



if 



<%= Matb.mndomO %> 

Vis, the »eihod (returns a double 



LI c%s= Sti-iiiff s - "roo 1 ' %> 

(VO? Von tan't ha*e a variable declaration here 



<%= BCVt Sirinn|H| ",.> 

V«, betake the String array it a* objett, a*d ANY 
objett can be lent to a printlnO staW*t 



4 



NO/ The aritW-hit u {me, but there's a i?ace between 
the % and the =. (t e*i't be *3t =, it. wJt be , 

<%= 5 > 3 %> 

£t*re, this retofvri to J boolean, io it fr*t* 'true' 

<■'„ = |j|se ,v ,.> 

We alr«ady *aid primitive literals afire fine 



No proble*. Thii n>st like the String .. rt print* 
the rttvlt of the ofcjetf* toStr.^0 method 
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API for the generated servlet 

The Container g*lHfI*Ht*s u iAum (Voiti yijiii JSP thai 
implements the HttfJ#pPsgc mterfitce. Thfa the only 
pari af tht generated lorvtet't API dial you need K> 
know You don't r;»rr thai in Tomcat, Ibr example, your 
generated servlet extends: 

org .(apache . j asper . runt Lme . HttpJspEJaso 

All you need tp know about ;trc the direr key mediods; 



► jsplnitO 

Ttiis method is Called from the lml|) method. 

Vou can override Ihis method. [Car you figure out hart?} 



«tnterfBC8» 



jsptnitO 



Up override tte« 



setvtet,jsp.Httf)JspPage 




HnpSenfetResponse} 



► jsp Destroy [) 

This method is called from the servlel s ( 
You can override (his method as well. 



melhod. 



► JspServiceO 

This method is called from the servlel's serviced melhod, 
which means it runs in a separate thread for each request. 
The Container passes the Request and Response objects to 
this method 

You can t override this method' Vo-j can t do ANYTHING *ilh 

rhit mulhnM -.mi innM lim [jnl rrW- r m\n Ih^l nntit incrki i1^ 

U ll« MIWUIVU ^VVI tfWPI ^WJ1W|^1 lirilW WWV hIPMh yUWW MKWtVW i+f , 

and its up :o tie Container vendor 1o take your JSP code 



Note the underscore 
at the front of the 
JspServiceO method 

Sfs WOnn froni of the other two methods. 
tsnmO and jspDeslruyO- Think of * thx 
Zv. flie underscore ,'n front of *» method 
means "don't touch/" 
en nn undo/scon? in front or the rrama 

^^sco^n rrDntofthemethotf 
name s/otr must WOT fry to ovemcfe P 
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JSP Wecyde 

Ufecycle of a JSP 

Yon wciti tin- .jsp file. 

The Container write* the .Java Bte fur the.scJ-vlri y« mr JSP becomes 



Kim writes a .jsp file, 
and deploys it as 
part of a, web app. 



The Container "rends" the weta.xml (DD) for 
thes app, but doesn't do anything else with the 
jss file 'Lnti the first Tins: its requested] 



J 



Web Container 



wcb.xml 



MyJSP.jifr 



The client hits a link The Container tries to TRANSLATE the ^sp ^ trr* 5 *» 

that asks for the .jsp. into .jova source code far a siervlet doss, m ^* 




0 



-translate. 



generate — 
%J@Pj* r KlyJSPJtpjMa 



Web Container 



CD 




The Container tries to COMPILE the 
servlet .Java source into a ..class; file. 



compile 



rr^ - generate 



iig] mil 



My JSP. jSp.java 



MyJSP jap.eP»i 



Web Container 
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JSPIifecycIe continued. 



The Container LOAbS the 
newly-generated serviet class. 




JJI. jLui 

Ufa] IUi 

□ L 0»L1 

HDk i.i 



Web Container 



MsfJSPjspxIasB 




The Container instantiates the 
serviet and causes the servlefs 
jsptnftC) method to ran 



The object is now a ful I -fledged serviet, 
ready to accept client requests. 



3 



-jspIiiitO. 



Web Container 




The Container creates a new thread to 
hofldft this dienf* request, and the 
servfet's _jspService( ) method 1 runs. 




Everything That happens after 
this is just plain old servfet 
request-handling. 

Eventmifly the serviet sends a 
response bock ta the client [or 
forwards the request to another 
web- app component). 



Web Container 
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translation and compilation 



Wt™. r turi +nj(y impressed- 1 
would never have gufissed' that 
th&y couSd md<c requesrrng □ J5«* 
take just as much overhead as calling a 
method on an E JS. Vm thinking the client 
has to wait,, what, five minutes for a\\ 
that translt-tins/, compiling, and 
initializing? 




Translation and compilation 
happens only ONCE 

When yow deploy a .vets i^p with a JSR tat 
whole translation and cotupilaitoo rtep happen* 

(inlyonrr in ihrjSP's lii'c. Once it's been 
1 1 .instated sad I'ompitad. it's just Like any nther 
i i lei. Ami jusi likt- any oilier nervkt, ooce thai 
# niri baa been loaded and fait&Hzed, the <Jt»ly 
thing thin happens al request Sow in rrraiiim ">r 
allocatioa of .1 thread fot itn* HgVke iin-ili<«!. Stl 
thfl picturr on the previous Iwo pages is for only 
f/ir /7r.f7 rrqttesL 

0 : 

OK . so th at mean s on ly the fi f st c! ient to ask 
for the JSP takes the big hit. But there MUST he a 
way to configure the setuer tn pre translate and 

tern pile... tight? 



A: 



A l + li nun k i+ '.- nnlcp tkn f! up* j- I ! nn * +ln -.+ Kip + .-. 
fi1 LI IULILJI 1 \L 'J Ul II JT LI ITT I II LI L 1 1 LTI I L LI I4J L 1*433 LU 



waitj most Container vendors DO give you away to 
*ik for the whole trjnslalion/CLimpilution tiling to 
happen in advance, so iriat even thefirsl request 
hap pe n & I i ke an y at her ser tfl et re qu est. 

But watcti out —it's vendor-dependent and not 
guaranteed. There IS a mention in the JSP spec (JSP 
1 1 .4.2) of a suggested protocol for JSP precompilation. 
You make a request for the JSP appending a query 
string '?j-sp precompiled and the Container might (if 
it chooses) do the translation/compilation right then 
instead of waiting for the first real request. 
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If The JSP turns mToo 
aervlet I wonder if I can 
configure serylet in it parameter?.., 
and whife Tm at it, I wonder if I 
can override The serviefs initQ 
method- 




. Sharpen your pencil 



Think about these questions. Rip back through 
earlier pages fand chapters) if you need 10. but 
don't tun the page until you've done this. 

Ves. you CAN get servJet HI parameters from a 
JS P, Hie questions are; 

1) How would you retrieve them in your code - ? (Big : 
huge, gravel-hauling hinr pretty close to the same 
way you retrieve them in a 'normal" servlet From 
which object do you normally gel servlet inrt param- 



2) How/where would you configure the servtet init 

n£jfarY]£lprK? 



3) Suppose you do want to overuse the nil;) 
method... how would you do it? Is there something 
else you can do that'll give you tfie same result? 
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overriding 



Initializing your JSP 



nervier -name 



Yen cm dr» servlflj iniiiMii^iitint) staff in y^i-js^ but itVjJSgfttfj 
different fi'isni wbal you da in a regtihu icn fists 

Configuring servlet in it parameters 

You eonfigwre servlel inic par;im$ for yrmrJSP virtually ihr miat way ymu 
configure tketa (hi a normal sefwtet, The only diilrrcnct: in that yrm linVc 
to udd 8 <jsp-lile:> element withia the <:scrvlcl> tut;. 

^Sfta ST** 

Testlnit</servlet-name> a y-t^U* servlet H- w to t^t 

<l!iit-paraio> treittd W Jir ™ 

<par am-name >eitiai 1< /param- n aine> 

<:pa raro-va Lue>J k i ckedbut t€wi rrksdi veins rt, i;oni</'parflni-vsilue> 
</ in it -paramo 
■■ / servLefc> 
< ae r vl et -mapp ing> 

<servlei:-naiiije>M , j, r 'l'e-tcInitt/at)rvleit-rjam&> ^ When you dffme a ievv] e f 

<url-pattern>/Teatrnif , jsp<7url-patterr : > y«* Mnfeii jJu, (j e ^ ( **" J J£P, 

<y aervlet-mapping> t> ^Ae Jt£P ""^hj 

</web-app> r y 

Overriding jsplnit() 

Yes, it's ilutt simple, II' you impletruHiii a jsplnit() im'thnd, the Cornainef calls 
this method at the beginning of lliin pnge*4 life M a kcrvtet called 1mm the 
servlei « init() uk-iIukI. s<» by the timr litis method runs there is a ServletConfig and 
ScrvlciCunirxi available to tin- servlet. TTiffl menus you rati call ^tScrvtetGonfigO 
.ind i»i:iNcn1ftCiuile\t from within the jsplnin) method. 

Thi* t'xanipU- VOW* the jsplnittj mclhnd (o nMrii.-w a WStyfesI init piiraiiu- 1 rr 
(configured in the UD). and uses the value to set an application -scoped attribute, 

(WtrrAt the 'g$>0 . 
, , j . „ e tW * ^ II) * *F 

Public void jspInitO [ y^y^v&^O^tWl 

ServletConfig sCcmlig ~ getServ.letConlig ( ) ; 

String emailAddr = EConfig.getlnitParametei ("email"') ; ^- — Tk* ■* E^CTLy' w k^ 

^la. 

ServletContext ctx = get Servlet Con text ( > ; 

ctx.MtAttTlfautefaaU", entailAddr) * ✓ #4k^WkjB|«fe«t 
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Attributes in a JSP 



Th[- example oa the, opposite page riwwii tin- JSP setting an apptkfatfeo-scoped 
attribute using a roethod declaration itial override jspluiiy. But most 'if the 
lime y<m*ll be using our of the four inipiirit obftcti to gel and nei attributes 
corresponding to the lour attribute scopes available in a JSP. 

Yes, lour. Remember, in , nidi I ion 10 the standard gervtet request, session. ,md 
application (context) scopes, a JSP adds a fourth scope. — page scope — that yon jel 
front a paji<-Coulexl object. 

You mtialt) won't i)i*tjd (or care abom; page tcope mile** you're developing 
Ctatom lags, so vve won't *ay any more about il until (lie custom lag) rhymer. 



In a servlet 



In a JSP 

{using implicit objects) 



Application 



ge (S er v letCon te x t( ) scWti ibuKi (too ' I 



application s*tAUfitwte(W, barObj); 



Request 



Session 



request, gel Ses$ Ion () siMllnbutfl'fOO' . bai 0b\) 



Session w:IA":i::nr!.rl(-o . h-urQbj). 



Page 



Does not apply! 



pageContext.selAttribuie("loo H .baiObj), 



Bui this isn't the whole story! In a JSP, there's nnrtlm way to grt and 
sol attributes at enjf scope, using only the pagrContcxl implicit C 
Turn the page am] Imd out bmv... 



Them's no such thing a* "content" W**** 
^n though attrtnutos in 
are bound to the Ser^LrfCoriteMt ohject. 

t,™ ^/oht trick vcu into thinking that attributes stoned 

scoped aJfrifiutes^n a servtet.yw say: 

^vi^nt-to .^tribute 

but in a JSP you say 



ii 



cation . CjetXtt cibute t "too") 
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pageContexl and attributes 



Using PageContext for attributes 

Yen can uie s ^eCssntesi rdfeircHee'Mtggi fttsrilwaei 
from any scope, including ih<- page scope for attributes 
bound hi ihc PageContnrt. 

Thi- methods thai work with other swipes take an in) 
avguTiH-nl to indkftte the scope Alttlutlgb tin - attribute 
access mcllmds cotno limn JspGd uitfxt, youl] find lln; 
const iints tin ihr ^i iipt-^ inside thr Page Context class, 



JspCortant 



g BtAttribL>te(Strl ng name) 
getAttribirie(String name, int scope) 
getAtlr ibuteMamesinStopej int scope) 
findAttributa{String name) 

II more methods for ANY 

Including aim liar methods to 
II sat and remove attributes from 
flany scope 



Page C orient 



APPLICATION SCOPE 

PAGE SCOPE f n „aJ 

REQUEST SCOPE f^fc 

session scope 
II more fields 



■jetServletContextj) 
gfltSassionQ 



/J mora methods 
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Examples using pageContext to 
get and set attributes 

Setting a page-scoped attribute 

Float one - new Float (42. ; I ■> 
<% pageCont ext. *«tAt tribute ("foe", one); |> 

Getting a patje-scoped attribute 

<%= pageContext.g«tAttrifciute("foo") %> 

Using the pageContext to set a s ess ron-s coped attribute 

<<i Float two = new Float [2.2. i); ±j> 

<% pageContext, MtAttribute ("foci", two, PageContext - SESSI0N_SO0PE t ? *» 

Using the pageContext to get a session-scoped attribute 

<|s= pageContcKt.getAttributer'f^'", Pagecontestt. SESSlON_SCQPE> 
iWhirli h icleiukal lo: <\= session. ge-LAttribute f*fo6* I *> 1 

Using the pageContext to get an applic a t lon-scoped attribute 

Email is: 

fj^feCLtiteit.L.^tAlltlribULe {*mSJl ", PageContext.APPLICATION_SCOPE> 

Within ;i,fSF, the code above is WeMjeaJ (p; 

Email is; 

<%= applicat ion. gatAttribute ("mail") %> 

Using the pageContext to find an attribute when you don't know the scope 

<*■ pageContext. findAttribute T too") *> f-, n( J A 

Wbert does the SndAttribuije{) method l<«ikV h looks lirst in the page context, j& il dirrc-'s .1 "inn" 
.11 1 ril hi it- '.miIi 1 hi hc- 4-iinic-xi - .-. i|n\ itu-ii c^Uing ,/<rWAll7ibutc(8iriiig name) on n PagrCmiti'xt wnrb jii<( 
like calling' jr«7AitribiiicrStniig name} on ;l PagrContext. Bin if there's no "foo* miribuu , 1 the method 
- 1 . 1 1 c > looking in other scope*. Prom most n'»ti itied to leant restricted stupe — m othcl WOttlk, first 
requeii ft&ipe, iht-n te^sbn, then fit! ally j op lit at in ti kcoj^e, 'the first one it find* with thut name win*. 



pageContext 

gctAttribntfitStrinnl 

is for page scope 

There era TWO overloaded getAttributeO 
methods ¥™ on Pas 80 ^* 

a aw-arg that takes a Stnng. and a 

The one-nrg version wortts^ fak« ■ afl 
the others-it's tor attributes bound TU 
the pageContext object. Bui f^e lM«Hvg 
version csfl be used to get en attribute 
torn ANY of the tour scopes. 
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ffiree directives 

While we're on the subject., let's 
talk more about the three directives 

Wr already looked at the dircrtive us^cd [brgcitiiisr import ^tiLH iin ni-- 1 1 1 r ■ ■ 
the generated ncrvlt'L clas* mack" from your JSP. That was a page directive 
(one of the three directive types'! with :m import attribute [one "f 13 
;mu ibutcs of the page directive). We'U hike a quiets look dOw at the- other*, 
although some unri'i be covered in detail until later chapters, and tome 
Hnii'l be COVCted in detail at aft in tbl* bonk, because ihev're rarely used. 

(?) The page directive 

<iP page Lmjport="foQ . ** sessional alaa" %> 

Defines psge-spepfic properties nut li as i harm lei encoding, the 
conterti type for ibis page'i response, and whether ihi* page should 
haw rl m- implicti sessmn object, A page direeiive use up to 
thirteen dihVrmt attributes [tike the import attribute), ab hough <>nly 

ftttir .iMribuics are covered rtn ibe rx-n.ni. 

(D The taglib directive 

Deling tapf libraries available L ■ ■ tbcJSfi VVe bnven'l talked about 
usuiu < ustimi la^s iiml si.md.ird .m timis yd. so Ihis tniylii ■ lh ■ I make 

any *eo« at this point jtnt k<> with it for now. .we have two whole 

chapTed mi tag lilirnries mining Hp IKfejL 

(3) The include directive 

inoludo fil = -"witJl<cdHcadcr .html" *> 
lljiEiii>r V hfcVl 3'rtd r-^rl.. 1 9iii 1 mife nrlrl,*rl irtffi #«i]Vtuifi1 ri^iirp- 

at translation tittle, I his lets yon lankl reusable 1 hunks (hjfce .1 
standard page beading or navigation bar) that can be added to 
each page without having to duplicate all thai code in each JSP, 

I'm confused.., this page heading says , "while we're on the subject..." 
but I don't see how dfrecfrves have .my thing to do with pageContext and 
attributes, 

A: 

f\ They don't, nol really. We just said Hut to cover a h*d pathetic 
nonexistent transition between two unrelated topics. We hoped nobody would 
notice, but NO...you just couldn't let it go, could you? 
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Attributes to the page directive 

Of iht 1 3 page directive attributes tn tfwJSP sprc, oatyfwratv covered on ih<- 
exam. Vbu do NOT have- ic memorize thci entice list; ju»4 gri a It-H lor wh;n vmi can do. 
\WI| look in the isELJgnmd and i lie- two emyr-rekted miribincs in lain- riiaptera 



POSSIBLY on the exam 



f flip of f 

is ThreadSafe 



! added to the generated setvlet class. You get some 



contvtitTypv 
jsELIgnored 



Defines fl>e Java smport sti 
imports for free {by default): 

Defines whether She generated servlet needs to implement Itie SingleThreadModel, which, as you 
know, is a Spectacularly Bad Thing The default value is., "true" which means, "My app is thread 
safe, so I do MOT need (o implement SingleThreadMadel, which I know is inherentty m\ ' The only 
reason to specifiy (his attribute is if you need to sei the attribute value to 'false", which means thai 
you want (he generated serviel to use the SmgleThreadModel. but you n&w will. 

Defines the MIMF type (and optonal character encoding) fcr ins JSP response You ttiawmWwH 

Defines whether EL expressions are ignored when this page is translated We haven't talked about 
EL yet: that's coming in the next chapter For new, juss know that you might choose la ignore EL 
syntax in your page, and this is one of the two ways you can fell the Container 

Defines whether the current page represents sminer JSP 5 error page. I he default value is 'false", 
but if it's true, the page has access lo the implicit exception object (whfch is a reference to the 
offending Thrawable). If false, the implicit exception Object is not available 10 the JSP. 

Defines a URL to the resource to which untaught Thrcwables should be sent. If you i 
here, then ffiaf JSP will have an isErrorPage- 'true' 1 attnbute in its page directive 



NOT on the exam 



extends 

session 

buffer 
autoFtush 



Defines the scripting language used in scnptlets. expressions, and declarations. Right now, iheonly 
possible value is "java". but the attribute is here because isn't it just like ihose spec developers to be 
thinking of the future when other languages might be used 

Defines the superclass of the class this JSP will become You won't use this unless you REALLY 
know what you're doing — it overrides the class hierarchy provided by Die Container. 

Defines whether the p^ge will have an impiicil session object. The default value (s "(rue' 

Defines whether the buffered output is flushed automatically. The default value is 'true'. 

Defines a String that gets put into the translated page, just so (hat you can get it using the generated 



pageEncoding 



Defines the chaiacie 1 encoding for the JSP The defauh is 'ISO-6859-1' (unless the contenlType 
attribute already defines a character encoding, or the page uses XML Document syntax). 
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are scripttets : -\ 



This is SUCH a nice 
chapter with a VERy Icvely look 

at how to put Java code in a J-SP, 

but, um, took at this oompany- 
ide memo I jus* got. 



o 




IiitetciCfl.ee Memo fram the cto 
URGENT 

Elective immediately, anyone caught 
using scriptlets, expressions, or 
declarations in their JSP code will be 
suspended without pay until such tine 
as it can be determined whether the 
programmer was fully responsible or 
simply trying to maintain some OTHER 
i liot' s cods. 

If, in fact, the determination is 
made that, the programmer is, in Cacti 
responsible, the company will go ahead 
and, in fact, terminate the employee* 



Rick Forester 

• :hie>f Technology Officer 

"Remember: there la no "1" in TEAM." 



"Write your code as it the next guy* 
to maintain it is a homicidal maniac 
who knows where you live." 

[•Note to HR: we use "guy" in its nan- 
gender specific torrn,] 
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Striptlets considered harmful? 

U it true? dm id thew be a downside to putting nil tbkjava into yourjst? Aftta 
all, lsri'i rfiLii ila* whole rrii'khi 1 POINT to aJSPS So thai yon write your lava in 
whal is essentially an HTML page ^ opposed to writing H I'ML in a Java class? 

Some people believe iOK. technical!) a tbt of people including dn.JSP and 
Servlet ittum) thai iiV Mptwtfato put ail this Java into pour JSP. 

Why? IiiiafrinH- yem've ln't-ii hired tit hutUI a big y«?b -.iie. Your omiti unhides 
a filial I handful f>1 Ijiu k-i'rul Juvii prnifntmmrrs. and a hugr group of "web 
ill ^]Min i ~" -graphic artinls and page creators who use Dreamweaver and 
Photoshop tti build labulou-S'looking web pages. These aTe not progr/immtrs 
(well, except for Ihf ores who still think HTML h "eadwjfy 




Aspiring actors working as web designers 
while wo i ling for Their bsg showbii breok 
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scripting rs our rfiere 



Two questions— WHV arc 
you moving us leern it. and WHAT is 
r hz alter native' WKat The f"* else 
IS there besides HTML it you can't 
put striptlets, declarations, and 
expressions m your JSP? 




There didn't used to PE an alternative. 

Thai means then? jut already mountains cil '.J Si* files brinmiinfj \ villi 
Java codi 1 stuck in every conceivable spot Li the page, nestled 
between leriptlM.. expression, ami de< laraiioit tag*. It's OOl there 
ami there isn'i anything anyone can do to change the past. So 
thai me arti vim'vr got to know hmv u> taut and wtdtfitmi these 
i - 1 1 - 1 1 1 ■ ■ if - .iii'l i'u in mnintftia ])<igfcy Written with them (unless 
viiu're given the ehancc tD massively refaclor the app's-JSPs). 

Secretly, we think there's siill a place for wsme of Uiis"ti<>tliitij» 
l.n-ais n Kttlejava in aJSP for qirickly te*(ing wmethhig owl oo your 

server. Bill fur the most part, you tlon'i wml to USC this for real, 
production pages; 

The re asou (his is till on the exam is because the iiHrrnnfim are still 
fairly new. sn most of ihc pages out there today arc >till "i dd-school". 
For tli* iittit" being, you stiit have to be abfe to tfoi'k wiltt it? A I 

some point, when I In- in Java-free techniques hit critical mass, the 
nhjiMrtivei (fain ilii« chapter will piwibublv ilrup «fT thr eiumi, :mH 
we'll .ill breath*: .1 collective sigh at ii»' ifcaih of Java-in-JSP*. 

Bi,il today noi that day, 



(Note to ptmib and teacher* the tour -tel- 
le *erd implied; in this taught bubble, that 
starts with T followed by three astwi s*s 
it HOT what you Itwfc. tt wss just a ward 

thai we fouTd tee. tunny vj r^liide witfwu; 
diwading the reader so we bleeped it wt 
Because i s fanny, ttttetf.) 
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EL: the answer to, well everything. 

Or tifmast everything, llui certainly an answer to two big 
complaint* about putting BCI.l2aJ.J3vB into a JSP: 

1 ) Web page designers shouldn't have Co know Java. 

2) Java rode in a JSP i* f.aixl to rhange and maintain. 

EL stand* [of "Esqjrtssi&n l^jutgwagt*, and il henum- official Im- 
part of thr spec beginning with JSP :>,(> ipec, FX i* nrarly 
always n niudt simpler ^;*> u-> do t&w/t of the thiugi vou'd 
normally do wilh * ripllets ,iud expressions. 

Of court* right now v^uYi thinking, "Bin il' I want myJSP 
tO use custom method*, how Cart 1 ded;irc and write llmse 
methods il' 1 cum use Java?" 

Ahhhh... writing the actual functionality (method code) is not 
the purpose of EL. The purpose of EL i* 10 oiler a simpler way 
[i> iiu-tikf Java code— but the code- itself belongs $opmnhfft fisr. 
That mean* in a regular bid Java class that"! cithei aJavaBcan, 
a class w ith statu- methods, or something called a Tag Handler, 
In oiher words, you don't write tnethpid wide into yourJSP 
when you're fallowing today's Bc*t Practice*. You write the Java 
method somrwhnr ttst, and aitl it using EL 
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An EL expression ALWAYS 
looks like this; ^something} 

In attier words, the expression 
is ALWAYS enclosed In curly 
braces, and prefixed with a 
I dollar [$) sign- 



first look at EL 

Sneak peek at EL 

Tin* eiiliiv nt-sl rhaptrr is t>n W Wffl won't go UWO d&atfa lien-. 
Tilt- only I'tMriim we're cirveriiii; ii is I it-e.auxi. 1 h** yet .mender kind 
of eletaeni (■with ks own syntax) thai goes in :*JSR ;mcl rhr exam 
objective* for iliis i hai-trr include recognizing everything ilmi am 
go into ei jSl J , 



This EL expression: 

Please contact: ${ applies tionScope .mail} 

Is the same as this Java expression: 

Please contact i <&= application. getAttribute ("■mail'') *> 



Not be all negative, but I'm not sure I see an earth-shattering 
difference between the EL and the Java expression, Surej it's a little 
shorter, but is that worth a whole new scripting language and JSP 
coding Approach? 

■ 

* You SO haven't seen the full benefit of EL yet The differences 
will became obvious In the next chapter when we dive in. But you must 
remember that to a Java programmer, EL is NOT neccessarily a dramatic 
development advantage. In fact, to a Java programmer it simply means 
"one more thing (with its own syntax and everything) to learn, when, hey, I 
already KNOW lava.." 

But it's not always about you. El ismudi easier for a non-Java programmer 
to learn and get up to speed in, And for a Java programmer, it is still much 
easier to maintain a scriptless page. 

Yes, it's still something to learn. It doesn't let web page designers 
camp letely off th e h ook , but yog' 1 1 soon see I hat it's m ore in tuit ive a n d 
natural for a web designer to use EL, For now, in this chapter, you simply 
need to be able to recognize EL when you see it. And don't worry at this 
point about recognizing whether the expression itself is valid— all we care 
about now is thai you can pick out an EL expression in a JSP page. 
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Easy— you can put an 
cfem&nt in The £>G that 
disables oil scripting 
demand 




This does nert work.' 

Tke «&nf>t*3Enab]efi ,^ 

attribute is no Johfler iT"' 
the JSP ipt/ 



Using <scriptfng-mvalfd> 

It*4 suapte you can make ii invalid fur a 

JSP i<j \\w\f scr i|>i iiiu, ■'li'iih'iiK 'ii i-||H|'-k, 
J.-.'. ,i expressions or declarations) by pulling 
a <srripting-invalid> lap in 1 1n I >1 >: 

«:web-app 
. . . 

<jep-confkp 

< j sp _ E' rope rt y-gr oup> 
-rurl-pat.tern* 1 , jErp<:/url-pat.i-ern> 
< scripting- invalids 
true 

< /script ing-invalid> 

< / j sp-eonfig> 
f ■ ■ 

< /ueb-app > 

Watch out vol i migtil hair Seipfi oilu-i lnni-ks 
..i mm lea rfjosv a page directive thai disable* 
scripting. In a r/rfl// version of ihr- ">.(! spi-r. 
there a page directive attribuie: 

<%@ p;igf is^ciiplingEittibtec 



Tafc 



II ■ 

I I 



hit/ il lii'iLS tTKmanad from the /mat sjHtr!! 

The (miy way to invalidate scripting senv is 
through the <scriptin^itn alid> ' 



you are nwe * 321 



ignoring el 



You can choose to ignore El 



Y<% EL is a good thing that's going w save the world as we know it. Bm sometime* 
you might want to disable ii, Why? 

Think back to when the oxfrri keyword wm added [o the Java language with Vernon 
1.4, Suddenly i\\r formerly unreserved (ind perfect!) legal identifier "assert" ffmotf 

•^mieilimg to (lit 1 rt.tnipiler. S" if y<ut had, say. a variable tunned awn", y<»u wit 
strewed. Lxcept tbatJ2SE version 1.4 came witlt asKeriiims disabled by default. II' v - * »n 
knew you were writing ((ir recompiling) code that didn't use assert as an identifier then 
vi hi ii.iikl i-huuM I -• ■ enabU' abortions. 

fio it's kind of the same thing with disabling EL — if yon happened to have template 
tejtt i plain iAd HTML or text) in your [SB that tm'hided something that looked ] L k ■ - 

EL [llspmething}^ you'd he in Big Trouble w you couldn't tell the Container lojust 
Ignore anything that appears to lie V.], and instead treat it like any other unpitu rssed 
ri-si. K^vpi there's line hig (lilTen'm e between EL and assertions; 

El is enabled by default! 

If you wanL RL-lucikin^ things in your JSP Hp be ignored, ymi haw tu say so 
explicitly, either tlimufdt a pa^e directive dt a DD element. 



Putting <el-ignored> in the DD 

<web-app ...> 
+ + * 

< jsp-conftg * 

< jsp-property-group> 
<url-pattern>* . j sp< /url -patterns 
<el-igriQEed> 

true 
</&l -ignored> 
<;/Jap pre>p«ety greup> 
^./jsp-coniig--' 



The page directive 
takes priority over 
the OD settingt 

i( there's a conflict between (fie 
<e/-jgrwrc*cf> setting in the DD and 
ft* isBUgoofBdpage directive*^' 
buie me diradft* ataay* ww*' Thaf 
Ms you speoiy tie defeat behawcrf 
fn [ho DD. but override it for a specific 



</web-app > 



Using the isELIgnored page 
directive attribute 

<%@ page isELIgnored= "true 
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Put wait,,, there's still another JSP 
element we haven't seen: actions 

So Ikr. you've seen live dilVcrcnt types of elcmenti lhal ran appear in a JSP: 
jaripllels, directives, declarations, Java expressions* and expressions. 

Rue haven't seen actions. They eome in tWp RrVoHs stA«td&td Mvl-.wt. 



Standard Action: 

<jsp: include page="wickedFooter . jsp" /> , . 

for ' \yr{ work, 

Other Action: > «u»-- ^ f^t^T 

<c:aet vai-"rate" value="32" /> V. lw deW* 

AIiImhi^Ii ih;n'" misleading, 3 u- 1 ; 1 1 1 ^1 ■ iln-ir aiv ionic ;iciinns iliiii aren't 
considered stftnrfnrd nitif>ns. but which are s(ill p:irt cf a now-standard library. 
Jn other words., you'll later learn that some rif ihe nonstandard (the 
objectives refer (n (hem as fustom] actions are... standard, hut yet they still 
aren't considered "standard art inns". Yes., that's iinhi they're Maitdajdizcd 
nini-siand.ird custom aciions. Diiesn'1 thai.jiiM clear ti right up Ibryou? 

In .1 later c -I tuple) when We ^vt tit "using lajjs". we'll have :i slight]*) licln r 
vocaiitiUu v with ^brcli tnt talk aboul this in mure detail, no relax. For n«w, 
all hp vnwf ahiym in rerng-nizing an action when yon see it in a 



%ljjterpen your pencil 



LwK at the syntax fof an action and compare ti to me syntax ror the owiet 
kinds of JSP elements. Then answer this. 



2) How will you recognize an acton when you see it? 
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Evaluation Matrix 

Think about whal happens when each of 
these settings Jor combrnalfon of setli ngs ) 
occurs You'll see the answers wtien you 
rum the page, so do this one NOW 



EL Evaluation 



Place a checkmark in ihe evaluated column if the 
sellings would cause the EL expressions to be 
evaluated. OR place a checkmark in the ignored 
column if EL 'Ail! be treated like otter template text. 
No raw will have two checkmarks , of course. 



DD configuration page directive evaluated ignored 

<el-ignored> isELlgnoieri 



u n s DGcififid 


unspecified 






false 


unspecified 






true 


unspecified 






false 


false 






false 


true 






true 


false 







Place a checkmark in the evaluated column If Ihe settings 
would cause 'lie scripting expressions to be evaluated 
OR place a checkmark in the error column if scripting will 
cause a translation error. 



DD configuration evaluated error 
<sc ri pti ng-i n val id> 



unspecified 






true 






false 







@ Scripting validity 
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Marctithe JSP etement with its label by placing the JSP snippet in 
the box with the label represenmo that element type Reme.nber 
you'll have Drag and Drop quesiions on the real exam similar to 
this exercise, so don't ship ill 

JSP element type 



EL expression 



JSP snippet 
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JSP elements exercise 




JSP Element Magnets- f3ie Sequel 



i You know what dhey'ne called, but do you remember where they go in Hie 
I Generated serviet? Of course you do But this is jus! a (inte reinfaroemam/practice 
J before we move on to a different chapter and topic. 

f Pu! We element in the box corresponding la where that element s generated code 
will go m the servlet cSass fie. Note thai Ihe magnet msell does not represent the 
ACTUAL code that will be generated. 




public final class Ba*iceount*r_Jsp extends org. apache. jasper, runtime. HttpJspBase 

implements org. apache, jasper, runtime-. JspSource Dependent \ 




public void _3*pS«rvi€»(HttpServIetReg;uest request, HttpServletResponse response) 

throws java.io, IOException, Servlet Except ion I 
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Evaluation Matrix 
ANSWERS 



© EL Evaluation 



DD configuration 
<el-ignored> 


page directive 
isEL Ignored 


evaluated 


ignored 


unspecified 


unspecified 






fafse 








true 






—J— 


false 


false 






false 


true 






true 


fafse 







® Scripting validity 



OD COn'i^lii dtiCn &VciiUait?(j tjrrur 
<Qcriptmtj-invalid> 



unspecified 






true 






false 
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ANSWERS 











directive 






J gna i 1 : SlapplicitionScfipe.mall | 




EL express ton 






^^^^^^7^ - Float 142 ^1 ,- *> 

■ Float one - n«* 




script let 




1 <r!- pagecantext-geuiitributerfo*''! 


B 



The wo 
^Pf^^ by itsel 



The word "expression" 
by itself means 
-scripting expression" 



Of course the word -expression" is nw?r- 

luuilcd for JSP etemen/.s. If you S9e me 

won* 'expression or 'scripting 

/r means rnw s«* r i« """if 

using Java language syntax: 

<%=foo.goimmeO „ . 

The only time the word WM* 

(o £L is if you apecr/fcaffy see " £L m " T0 

descriptions or label! So, always assume 

is' 





< jap: include page="foo.acml l * /> 




action 
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JSP Element Magneto the Se<juel 

ANSWERS 



[ 



paati import-"iava*uti 




public final class Baai.cCount*r_jap extends org. apache. jasper. runtime. UttpJspBase 

ijnplenvent-s org. apache- las- per. runtime. JspHouj.-ceDependent ( 




D-IwIh* - 6r MEMBER 



public void _jspS*rvic«(HttpiiervIetRequest request, HttpServletResponse response | 

Lhraus jawa.iu. iOException, SeryletExceptlon I 



1 <%= request. getAttribute("foo") \> 






1 <i Flost one - naw float (42. 5l f t> 






| .Tdli; 5 1 JEJHJ i^uLjojiS-cope.niail 1 | 





Urn*** ^" f^L j 



it^vitt method 



(Not*: the order o{ tHesf 
ti^y d«*Wt matter.) 



MflTfc «„o-W J**t ti* JSP *«* ^ ( TVi* e^*Jrt * 



^ V* » «t*fc ? ,rt if tM HSSSto^ ^ 
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Stow ffiafite* 7 



Given this DD element; 

47. < j ap-pr ope r ty-gr oup> 

48, <url-pattem>+ . j sp</url -pattern^ 

49, <e 1 - i gnor ed> true< / el - ignored> 

50. </ j sp -proper ty - group> 

\\ \im rlm\H [Ik: 4 ■ I « ' 1 1 ■ t ■ 1 1 1 :h"Ch nn[>]!>iJ)^ ((!h<XKSe <i1l i hill applv-j 

{J A, All tiki! uiili i hf npc< Bred Extension mapping should be ir^m-fl by the 
JSP L-tmt;min- ;is ivdl-furmed XML iik*. 

G B. All Ecs with the specified extension mapping should have any 
Expression Language code evaluate*) hy the JSP coatainet 

□ C. By defaiilt, all Gtes wiih die specified extension mapping should NOT 

have any Expression Language i«de evaluaml h> ihejSP nun. -i. 

□ I), iWiiii.ir, this tag is NOT tujdafstpod by the ecmtaawr, 

□ K. Although this run f* tegair ' f is mlnm-kini, because rjie 1 numbier: 

b«bav« ihis vtfft by defeult 



Which directives specify an H i l l 1 respmise that will be <il" type "inia^e/s\ j;"? 
(Choose M dm apply*) 

□ A. <%@ page type=" image/ svg" <*> 

I I N j-n in : m hh_ J n riL 

— J r>. ^515 page mj.me±y pif = ■ ■ -Linage ;avy ■ T3^ 

(.;. <i@ page languages" image /svg" fc> 

LJ D. <%@ page contcntType=' r ±mage/svg" %> 

□ K. <%@ page pagaEncoding=" image /svg" ft> 
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Givca thiisJSP: 

1- <%g page in^ort^" java.util . *" %> 

2 , <h tailxb wiy Th# p44pl# wh* like 

3. <%- request .get Parameter ("hobby") %> 

4 . are : <br> 

5'. <% ArrayList al — (Array List) request . getAt tribute (" names") ; %> 

6. <<t Iterator it - al . iterator () ; 

7. while (it.hasNextO) ( %> 

8. <%« it, next 0 %> 

9. <br> 

10. <% } to- 
il. </bodyx/html> 

1A huh types t»f code are used in ihisJSl 1 ': 1 (Choo&e <ill \Um apply,] 

□ A. Et, 

□ B. ilin-nivc 

□ t:. eipr«nion 

□ D. template react 

□ & acriptlet 



Whirb dtatetnenta aboul jeplnlt(> ;ir<- tpw? (CJjgch* sU thai apply.) 
G A. 1 1 lim In it ServletConfig. 

□ II. 1 1 h;i» a<-«-cj« ui ;i ServletContext 
LI C It As ciiK ctillt-d once. 

□ I ). Ii i - : 1 1 1 be i iverrfckkru 
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Wbidi types of [phjccis an; available to the jsplnit ( ) method? 
(CUkkihc all litiit iip|)|v.) 

□ A. Setvlet-Coiifiy 

□ H. ServletContext 

Jspservle tConiig 

□ II JspServletContaxt 

□ ]■'.. HttpServletRequest 

□ V. HttpServletRe spouse 



<%@ page i$ELlgtioted="tr«e J ' %> 

What is the effect? (Chciose all that apply.; 

d A. Nothing. lhi> page diiiTlhv is NOT Jeftcie J. 

□ H. Tin- Mirt't live turns ofl the evaluation of Expression Language i ode 

by tfecjSP container h all oj die web application- SJSP& 

O C. The JSP ajniaitiing this direciivi- laottld lie ueaitd by the JSP 
nnHamn n> .1 we 11 -formed XML lile. 

□ I). Th* JSP containing thfe directive should NOT have any Exprcsskm 

Language code evaluated bfj the JSP container. 

d L L This jsaffu directive w$U tmty turn iifl" RL evaluation il tin. 1 1)1 > 

des-J;uH'> .1 <el-icrnored>tmo</Ql-igriored> 1 ■ 1 1 1 1 , - n 1 with a 
I'RLpawrn thai includes thfoJSP, 



— Which statemctU c-nnr-eriiimrJSPs is true? (Choose oftfc) 
' □ A. On Ij j aplnit ( } can be wri rid d 1 1 

Q It. Only jspDestroy () 1 .mi In- nvrrriddrit. 

Q C < >jih _ jspService () i au ht jm niddt-n. 

_J l >. Tlcdi jsplnit() ^ ■ i.i I jspDestroy O cart be overridden -> 

□ K jsplnit (). jspDestroy () . , ni ,| jspService () ran all U- 
iivcrriiMm, 
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W&fchJKP lihrydc step h»M itf qittftir? 

Q A. Translate ihejSi' iciUi a ■servlcl. 

□ ]i. tJiHUpik' ■ smlel sr Hill r- ii nil'. 

□ < c-:Ll _jspService ( ) 

LI l>. InM;i]i[iiilc lllc m'irlrl rLlSH. 

□ ]v Call jspinitO 

□ ]■. Call jspDestroyO 



Which arc valid JSP iinplk ii variables? (Cliunsc all th.il iip[>l v. : 
Q A. s t ream 

□ II context 

□ C. exception 

□ ft listener 

□ application 



Given i im-st with two parameters: oni- named "hrst" represents a user's 

Hist same tod another named "test* repit ^-iu* his Ihm nwv. 

Whkh JSP «cnpllel code output! tb«i(! paHuBeter virtue*? 

G A, <% out.println (request .get Parameter ( "first " ) ) ■ 
out .println (request . get Parameter ("last") ) ; 

□ ]1. <% out.println (application, g«tInitParameter{"Orat") ) ; 

out. prin tin ( application. getlnitParametert "last" 1) ; %> 

□ C <% prmtln (request , get Parameter ("first" ) J ; 

println (request, getParameter ("last") ) ; %> 

□ D. <% prin tin (application, ge tin it Parameter ("first" M ; 

println(application.getInitParaiiieter ("last")) ; %> 
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Given! 

11. Hello $ (user . naras} ! 

1£. YcfViX nuraJscr ie <i;:isut value-"? [vieee , phone ] "/>■ 

13. Tout address is t js,p:fetProperty name=' r user" proper ty="addr" /> 

14. <:* if (user IsValidO ) {*>You ate valid!<% } fc> 

Which sMri'infiiis ire rnu- J C'Iujom* all thai apply.! 

U \. Lines i| Lirid 12 (and no other* contam exampleji of HL ckmcnts, 

^1 K IviiK- 14 Li -in ej&ttlpic <jf acriptlFl ruck-. 

□ ( !. None hjT t ht: lines in this example eaatofo template texi. 
Q D. Lines 12 mn I tfiodudr rxuniplt-* "I'JSP ^andard .n-tnuis 

□ Eh line 11 denatwEuitratt* an mvatid use <»r EL- 

d I'. All four linen in ihis cxtLmplr would be valid in nJJSP page 



Wlii< hJSF ttpMMilaa t*£ twill prim i In- conicKi iniii;ili/;iium paruinrlrr rimm-d "javax. 

□ A. <%= application. getAttribute(" javax . sql . DataSource") %> 

□ B, <%- application. getInitParaBeter("javaK.sql.DataSour«") %> 

□ a <%- request . get Parameter ( " j avax . oql .DataSource ' ) i> 

□ I). <%= contDxtParam.getf u javax.sql.DataSource") *> 



Which statements about disabling scripting elements are true? 

[GhtitiSe »lll (h,Hl 

Q A. Yiiu h'hii'i disable, scrip tbg via the DO 

□ II. faucanotivj disable ^ripdn^ at the applkation levtL 

O C You can disable scrip ting programmatic Lilly by Lining the 
IsScriptingEnabled (i^c directive uLLributc. 

□ 13. Vnii run disable tripling via the l)l> by using 

< scripting- invalid> etemoal. 
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In srulieine, wiial ;trc I he Java types of thi! followingJSP iinplii.il objc< tfc 
application, out. request, response, session.' 

java . lang. Object 
java .util .Map 
Java .util .Set 
java. util. List 

□ II. j ay ax _ servle t Se r v le tConftg 

java . lang , Throwable 

Java . lang. Object 

javax . servlet. jap . PageContext 

java .u til .Map 

G C , j a vax. servlet, Se rvletcon text 
javax . gervlet. jsp. JspWriter 
javax. servlet. ServletRe quest 
javax . servlet . ServletResponse 
j avax , servlet . http .HttpSession 

□ 11 j avax .servlet.ServletCon, text 

java. io, PrintWr iter 

javax , servlet. SerVletCOrifig 

j ava . lang . Excep t ion 

j avax , s ervlet . Re que s tDi spa tchex 



Whii:h iii an example «t* ihr syntax ust-d to import a class in a jSl J ? 

□ A. <% page import-" java. u til .Date" *> 

□ B. <%@ page import^" java. util .Date" @%> 

□ t.:. <%@ page imports" j ava .util .Date" ft> 

□ I). <% import java. Util. Date,- %> 

□ <%@ import file="java. util .Date" 



tiiven iln-JSl': 

1. <%@ page isELIgnored-" true" %> 

2. <%Q taglib uri="httpj //java. sun . com/jsp/ jstl/eore" 
preii*= 1, c" 

3. <c:set var-^awesomeBand" value="LIMOZEEN"/> 

4 . $ { a we somcBand } 

W hal Wjll !><■ '!:■• i tutptft? 
_l \. $ {awesomeBand} 

□ K. LIMOZEEN 

□ ti. Nu output 

□ D, An exception will be thrown because all taglib directive* must precede flfe ft(?nJ ( 33& 

am page l Li ret- lives.. 



mock answers 



3 



qiven m DD etemetjt; US.P ft 

47. < j ap-pr ope r ty-gr oup> 

48 , <url-pattern> + . j sp</ url -pattern> 

49, <e 1 - i gnor ed> true< / el - ignored> 

50. </ j sp -proper ty - gr cmp> 

\\ llM rloi'.s l\\f. 4 ' 1 4 ' T I ■ t ■ 1 1 1 :h"('h HM[>]!>iJ)^ ((!h<K»Sft <l1l I hill ii|>plv.,i 

{J A, All tiki! uiili the *pc( ified Extension mapping Bhoultjl be ir^m-fl hy the 
JSP L-tmt;min- ;is ivt-ll-liirmrd XML fik«- 

G li. AIJ fEca with the sp-rilir-H extcoaJOfl mapping should have any 
Expression Liiiiguag*.' code evaluated Ivy thrJSP ciniuiih t. 

111 (.'. |ty (k-ffttilt, all Gtes with the spctlRcd exteuston mapping shtmld NOT 
haw ray Expulsion LanguftK r mHe evaluated by the JSP container. 

□ I), iWiiuir, this tag is NOT tiodafstpod by the cemtdner, 

□ L. Although this run f* tegair ' f is mlnndaiiL because the i oinainer 

behave* iht* by iirfauii. 



-Of^iem C turn* off 

the t«ali*atin5 of £L 
f*o«iiions ts/ i JSP 
1.0 twtame*- a«d by 
default the CcwUifc" - 
does tt\*iic tL 



2 



Wh'nh directives specify an HI TP response that will be ol type "imaKe/svj{ r ? 
(Choose all dm apply, i 

□ A. <%@ page type=" image/ svg" *> 

I I n jfi n z rm •■> — t a n 

r>. pdqe nu.iiitj±ypti= - iiEdyt;/ avy ts^ 

CX. (I. <fc@ page language=" image /svq" %> 

£j D. page contDntType= rr image/svg" %> -Qybtm D i* 

[■.. <%@ page pageEncoding="unage/svg" %> diretti« 
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Givm thii JSP: {JSP «2~0 " tbe " [) 

1. <%G page inf)ort^"java.util.*" %> 

2 , <h t»l^-<bO'dy ^- Th# p44pl# wh* like 

3. <%= request .get Parameter ("hobby") %> 

4 . are : <br> 

5. <% ArrayList al = (Array List) request .getAt tribute rTtairuGs") ; %> 

6. <<t Iterator it - al . iterator () ; 

7. while (it.haaNextO) ( %> 

8. it, next 0 

9. <br> 

10. <% } to- 
il. </bodyx/html> 

1A huh types ttf code are used in ihisJSl 1 ': 1 (Choo&e <ill thai <ipply.) 

□ A. Et, _Th« a no EL in Us JSP 

li. rlinvliw TkerA 3 d'n-tfti™ * ft* J, 

Ifl | .. exprmion k^bfe W all over (like line U 

H D. template text «f t«<™ sewft»i 

U E; acriptlet 



Which atateaieiHa aboui jsplnito ate true? (Chaos* sU thai apply- 
^ A. 1 1 I Hi ,uxv» In it ServletConfig. 
C% 1 1 htu tresis fcfl a ServletContext 

once. 

Mil 1 1 r;i 1 1 be nYrrricUien* 
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Which l yfH*>of..hj«Tis ;nr ..v;iiLil»lr lo ill. jspInitO nii'ilmd? fjgp ^0 set ^° r 
( C i| ii if BH : ni! 1 1 til 9 iipjitv.i 

S A &irvletCo " D 9 ,J£p s fc,* »d» yU^n old K^lcb, K 

S ft. servLetcontext ^ ave j ££eK ts {he ytiim £<rwleiC««*>9 

□ C. JspssrvletConftg ^ ^letCohk** objtf £ **** 

□ D JspServletContext talfe^ abwt rt^eik a^d 

□ }■',. HttpServletRequest 

□ V. HttpServLetResponse 



6 



Ohm: (JSP •«> « |JW 

<%@ page isELIgrnored™■ , ■'tx1ie■ , * %> 

WIilii is thi* ef&et? (ChciosL' tft&l ;i|i|j]y.; 

Q A, Nothing, 'hi* p*9* cBsectivc is N'( )T defined, 

□ IS. I In- ilin i livr iiu us njT tin- evaluation of Exprmkiti Language ««J« -Ofbw B « uniu^tt 

b} thrJSJ' n>ikl;ii»t-r ill -ill of III.' Wrh w P| iIif sitiwfi JSI*. ^"sSfceb the 

□ C. TfeeJStP cuiuaining this directive should he treated by the JSP ertlosir^ JSP 

I'niii.iiiii'i li> .i well-ibrnii-d XML lile. 

M I). 'I'lirJSI 5 ccntaining this directive should NOT haw any Estpresiioii 
Language code evaluated bfj the JSP container. 

Q M This page directive i. w ■ I L only turn off EL evaluation if ilu 1 1)!) 

des J:i.n > ,i <el-ifjnored>tmo</Ql-igriored> i ■ 1 1 -a 1 1 , - n I with a 
VRL pattern iJinr includes tJifeJSR 



Which statemeni concsnwjfrJSft is trufcf [Cnooie no*;) Wi>f 

□ A. On ly J aplnit ( } can be wer rid tin 

Q ft. Only jspDestroy () h iui In- uvi-rriddt-n. -Remember the underscore 

□ C. Only _jspService() fcta he wn iddt n. * W>* d« ^ / ™ ct}, * d 
i-V" Un i be overridden 

; Ju 1 ). ftiiih jsplnitf) ^ i i.i I jspDestroy {) can be overridden. 

□ K. jsplnit (). jspDestroy (). iJiid _jspService () i :ui :ill be 

ovtrrriddai. 
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Which JSP liln y<h- rtrp i» mil Ctf "i -iI.t:* (J £ p ^ * ttk0n 

Q A. Translate the JSf J into a servlcl. 

O ]i, tJitltjpiU' fjffVlcl IC/Utt r- i-mli-. 

^ t : Call _jspservice ( ) _ ft* ^£er^e method 

□ 1). Uivi.nni.iic ilic sn-vlci rLiss. irf*er be tailed befo« jipk«t 

LI ]v Call jspinitO 

□ 1-. Call jspDestroyO 



( tap y^Osettiw 1 -*-* 1 

Which arc viilid JSP innpticii Vairiabics? (Choose all thai apply*) 

-Options A, ft, W P 

□ D. listener 
id' I', application 



G A. stream 



(JSP f^-^ 

<;ivfii .l n'lpH'si wiili nvu |Kiramf«i*r»: one named "first" represents a users 
first nitnif iiml ,'hmjiIici iwnn-d ic|nrs<-ms his liwt name. 

Which JSP >!<xi|>lM a nh- <>nl|nlW tlx'*- p:ir:inwl«. T v^McC Option uMi the u «*t" 

^ A <* out .print In (request. getPa ramete r ("first")) ; ^litrt flbjfitt W ft* 

out.println(request.getPararoeter ("last") ) ; %> printW) method- 

□ B <$ etut.priritln (application, getInitE>aranet»r , first") } ; 

out. println( application. getlnitParameter r last") ) ; *> 

□ (.: print In (request . get Parameter ( "first" J ) ; _0»tn»* C and P are »is*i*a, 

println (request, getParameter ("last") ) ; ■%> "Vvt" iwflitrt ebjett 

□ 1) <% println ( application. getlnitFatanieter ("first") ) ; 

println (application . getlnltParameter ("last") ) ; %> 
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Uhm (JSP «3-D ¥5 [ ' l6i 

1"^ 11. Melio $ fuaer. name) ! 

12. Your number io <o : out value- " $ ( user . phone \" />. 

13. Your address is <jsp:getProperty name="ujser" proper ty="addf' /> 

14. <% if (user. i aval id 0 > <%>You ate valid f<% } %> 

^VhSn fi rts-Kment! arc tsue? fClmose all thai apply*] 

fflf A. Line* 1 1 smd I - (Hod no other*) cartiflin example* fi£' EL dementi. 



B, Li: ir 1-1 is aa example of scripdci code. 



^(U^ C •* wtowtt be"*" all 

Qi C None of the lines In tfelf example contain template ieju, | mtI i^Lude -teHflste -te*t 

U 1), Line* U llekI I 9 IncitKfe (txaWttl^ <>l JSP standard nrliuTii. I> " ^wrefrfc 

line tZ d«s wi ^We i JSP 

□ i: [. I I d, „n*- an invalid - of EL. ^ d * W , 

-Option t ii interred: 

^ T ^ 



F. All [pyi linrs in ihi-s example nl-cl be valid in aJSP jiagr. /J « ujlid. 



Which JSP expression tag Mffl] prim 1 1 1 l- eoutex. iniii.iii/;iiunL parameter named "janatx. 
]^ sqliJaiaSaufce*'? 

□ A <%= application. getAttribute ("javax . sql . DataSouree") %> 

Sf H. <%~ application. getInitParametej:("java3{.sql. Da taSource"! 4> 

□ C. <%« request . get Parameter ( "1 avax sql DataSource ' ) i> -flp-tion ft sW* 4fc 
J I). <*= cont6xtParani.getf w iava3i.sql.DataSoBrce"1 *> temtt ef 4*J 

cbjett 

Which statements about disabling scripting element* lire true? 
Jj (Chtmse all thai apply: 

Q A. Vim can't disable scrip tbg via the UtX 

□ B. Yrtti can rmiy disabk scripting at die application lewd, ^ ^ ^ ^ u y e nrjptma 

O C You can disable scripting progt'^fnaricftBy by using the elemen'b tHrou^h "tbe DD Th* 

isScriptinqEnahl*d page directive attttootC, <j^ J p- e ptrtY^o^' : - element 

Ef n. fe« can djttbfe scrip** vb fce Dl> hy ^ (fee f S^hbv 

< S =riptin^invalid> dn.u-m. Mf^SSbS I EJ^ 
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III HL^Hlrm-r, wbu! ilTT !]l1-JntH types l»| llir j f tile !M ill u; JSP iniplUil n iliif, I-: (JSP '"^ 

application, out. request, response, session? 

□ A 

java.lang. Object 
java , util . Map 
java.util .Set 
java. util. List 

□ I! javax. servlet . ServletConfig 

java . lang . Throwable 

java . lang. Object 

javax . s ervlet . j sp . PageContext 

java . util .Map 

^ ( ;, javax. servlet, servletcon text . 

java3t.aervlet.jsp, Jsplf r i ter -Opt™ C fhc*s we 

j avax . s ervlet . Servle tReque s t UttC&ttt 
j avax . s ervlet . Sarvls tResponse m ? * J 

javax . sexvlet .http.HttpSession 

□ Efe javax.servlet.ServletContext 

java . io , PrintWriter 

J avast , a ervlet . servletCcnflg 

java . lang . Exception 

javax , s ervlet .RequestDispntcher 



VVliict] if ;iii i"\;iiin>lc i i-f" ■!■** svtimx ut**f| t<i import •< dsss in ;, .|^P- 

□ A. <% page imports" java .. util .Date" %> -Qyba* h $ D *e bet*** 
I-. „ Jy Java statement* w*V «w 

□ R. <*@ page imparts java. util. Date" @%> ™U e J™lkih <V- *> 

SB C. <%9 page i*iport=" java. util. Date" %> -tyt* h C « tke «Jy e ***rle ti*t 

□ U, <* import Java. util. Date; %> iW {he £x*«it synli*. 

□ E. <%@ import file-" java, util. Date" %> -Oft"*, t is i h «| 1( J bt^ if fWf pl 

*o import divttW. 

Hivtn the JSP: (jgp v2J3 «£t»«» "° |J 

1. <%® page isELIgno red-" true" *> 

2, <%@ taglib uri^'http: //java. sun, com/jsp/jstl/core" 
prefix^" c" %> 

3, <c:set var="awesomeBand" r valu.e= |1 LIMOaEEN"/> 

4 . $ { awe s oraeBand } 

VVli.U uill br tin- ampul? 

fif A ${awesoraeBandl ^Ofbof- A EL e*fi*ifl*i i* 

□ I; LIMOSEEN and pawed *a*afe#- 

□ C, Nhm.hu i ml 

□ 11 An <?xrqnhni will be tbfflWa UTiiuse all taglib nlirrctives must precede ^ ^ g41 

lin\ page ..liir'Hli'a's. 



JsriptlMsjSP 



Script-free pages 




LOSS the scripting. Do your web page designers really have to know 
Jaua? i£ that fair? Do they expect taruer side Ja^a programmers id be, eay, 
graphic designers? And even if it's just you on the team, do you really want a 
pile of bits and pieces of Java code in your JSP*? Can you say, "maintenance 
nightmare"? Writing scnptless pages is not just possible, it's become much easier 




home with EL, and you'll like it too {once you get used to il). But there are some 
traps.. EL looks like Java, but isn't. Sometimes EL behaves differently than if you 
used the same syntax in Java, so pay attention I 



this la a new chapter 



3*3 



official Sun exam objectives 

Objectives 



Building JSP pages using the Expression 
Language (EL) and Standard Actions 

7.1 Write a code snippet using top-level variables in the 
EL. This includes the following implicit variables; 
pageScope. requestScope. session Scope, and 
applicationScope; param and paramValues: header 
and headerValues: cookies; and initPararn. 

Ti2 Write a code snippet using the following EL operators: 
property access (the . operator), collection access (the 
[J operator). 

7.3 Write a code snippet using the following EL operators: 
aritmetic operators, relational operators, and logical 
operators. 

7.4 For EL functions: Wnte a code snippet using an EL 
function: identify or create the TLD file structure used 
to declare an EL function; and ideniify or create a code 
example to define an EL function 

Q.1 Given a design goal, create a coda snippet using LI m 
following standard actions: jsp:useBean (with attributes: 
'Bcope', 'type', and 'dasE'), jsp; getPno party, and jep: 
setProperty (with all attribute combinations). 

8.2 Given a design goal, create a code snippet using the 
following standard actions: jsp:inctude. jsp:forward, and 
jsp: param, 

6.7 Given a specific design goal for including a JSP In this chapter, w mtr. BOTH iitflud* 

segment in another page, write the JSP code that uses mfdtettims: <pp:ifteiii4#> jfi>t6 abjective S.2, wit 

the most appropriate inclusion mechanism (the include tie include page dmetiofftm tibjrciirt f>\7 (most 

directive or the <jsp:include> standard action]. <tf the ohjectivts in section 6 wtrt (ov-trrd in the 

previous chapter on JSPs}. 



Coverage Notes: 

Atl iif ikt iibjnttm in this Sfctien ntr covered 
completely in tfit.i chapter. Ami ifs n big one. 
Take J'wr time in tkii chapter; there's a lot oj 
picky details to jjo fhrnvgh. 
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scripttess JSPs 

Our MVC app depends on attributes 

Rr-nn:iiitiei li'i [br original MVC twer fipPf the SwfrvliN mtPtiUfi 
talked in i lie tmitki J;iv;i ckisa witli business logic), ilu-n .'W mi 
attribute in the request scopt lifFdre rorWHidiiifr in i li*- _|S P vim*. 

ThejSP had to get tin 1 attribute feotn tbr request scope, :nn| use 
it to rcn^t'v ;i response HCftd back IQ th* J Hrrr'n a quick. 

>iiiij>lili'-il limli .ii In iw i he- attribute ki><*s ftpPl controller in view 
ijusl imagine the scrvlcl talks lo ihc modrl): 

Sen/ let (controller) code 

public void daPost (HttpServietRequest request, HttpServlet Response response) 

throws IOException r ServletException t 

String name - request • get Parameter {"user Name" \ t 
xequest.HetAttribube ("name" , name),' 



Re que s t Disrate tit t view = rei^uttiJt .getRequeitDiGpdtcljai ("/result .;) B P") t 
view. forward (request r response] ; 

h> bt( ntv. 



JSP {view) code 

< html W body * 
Hello 

<t= r*que s t . tA tt r ibu t« ( v n 

<./body><: /html> 



It, II.. |'.u,| 



"Pad" **r*r 

fee W 
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non-String attributes 



Put what if the attribute is not a 
String, but an instance of Person? 

And run juii .1 Petton, I mm -i Rsrkwri with a "mime-" propi-m. 
We're using tin? term "properly" in tin- aoij-eatctrpri**! 
Java Bean* wwt -the Pewon cla^s Im^ a gtlNatncO iiiid 
setNamWl melhivd p;iir. which in the JavaBean spec mean* 
Benon has a property tailed "name". Don't forget thai iliv 
"najiif" property niciins a rlian^' iii i-iis4- fur (lit- lirst lettrr, 
"n". In Other words, the name of tbc properly is what yon ui-t 
when ynn mrip nlT the prefix "pet" and "set", and make the 

Bpiart charactci after dim lower paw. So, grtName/srtName 
becomes name. 

Servlet code 

public Void doP-.:;l I H"..pSetVletReqrle£;t request, 

throws 

foo. Parson p new foo.PersonO ; 

p , satBamp { "Evan" j ; 

request. setAttribute ("persoji" , p) ; 



too. Person 



public Siring getNamff) 
public void solNarn&tStringj 



HttpSfetvl fit Response response) 
IOException, Serviet Except ion I 



fUsLjuestDisfidtchet view = request. qetRaqueatDispateher ("result . j<;p"> ; 
view. forward (request , response) ; 



JSP code 

< html >< body > 

Person is i request . getAttribute (''person" 1 i> 

<r/bodyx/htinl> 

What we WANT: 



ret*" 7 




What we GOT: 




3BE 



Person is: frapersoiiti M2d(j(> 



*We'W talk about JavaBearts m a few pages, but for now, just know (hat it s a plain 
old Java class that has getters and setters that follow a naming convention 
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scriptless JSPs 



We weed more code to get the Person's name 

Sending 1 1 ■ • rt*ah of jprtAttribtttep to print /writi- sttatmew down 1 ! u<vt- us 
whul we vviin t ii iii-it runs (Ik- object's toStringQ method, And sftrce dasi 
E^srson decsn'l override its inheriied Obj^i-tsStringQ, welL; >'<m know what 
happens. Iini wc Want H> prim dir Fcrsnii's nantr. 



JSP code 

<htrel>-cbody> 

<i fm.PerBon p ■ (foo . Person) reque s t , qe tA ttribu be ( 'per Hon " J ; %> 
Person ls: p. get-Name () 



</body^</html> 



OR using an expression 

<html><body> 
Person is; 

<^S- ( (.foo. Person) request. 

What we GOT; 



") ) .getW«na() 




But then we remember that MEMO.. 



The one that can be summarized as 
"Use Scripting and Die" 

We need a different approach. 
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JavaBean standard actions 

Person is a JavaPean, so we'll use the 
bean-related standard actions 

Willi a couple til' standard actions, uc can eliminate all (he si ripl iiiLf 
code in our JSP (remember l iCiipditgltOcjje include* declarations, 
scriptlets, mid expressions) and still print out tin- value of the person 
attribute's mmt property llon'1 forget ih.il mtmr h turf an attribute 
only \hcpmon object i* an attribute, Tlir name property i* simply the 
thing returned Irtmi a Bemm > jrr-iNamo.l rnrili.«|. 



Without standard actions (using scripting) TV* 

< h t in 1 > < body > \>t c * 

fco.Persanp = (foo.Peiaaii] request . getAt tribute ( "-person-" ) j %> 

Person is: <%- p.getNanwO *> 



-:/body><:/htm.l> 

un Ja*» *** ^tt**^ 
With standard actions {no scripting) V v w 

<html ><rbody> 

< T s p : u seBean id="perEon.™ class-'foD.Peraon" scope- " r e<jues t" /> 

Perscn C tea ted by servlsl [ <jsp:getProperty nam£="par50E" proper ty=' r name' r /.> 

</body></html> 
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scfiprtess JSPs 



^constructing <jsp:use&ean> and <jsp:getProperf y> 

All Realty wntited ww tlie [uttettonattty <>l <jspigctI*fopttrty> becauw we wanted wUy to 
display rhr value <if the person's "name" property, lint bow does the Container know whal 
"pennon* means? If we had only, die <jsp:geihoperiy> lag in ih**JSR ift altmwi like iming 
an undeclared variable — ihc oame "'person". The Container umdly lias no idea wh;u you're 
talking about, unless you FIRST pal n <jsp:useBeaii> into die page. The <j;ip: use Bean > i* a 
way ■ if declaring and initializing the actual bean object you're using in ^jspigetft'operty^ 



<jsp:useBean> 



Declare and initialize a bean attribute with 

<jsp: useBean id="person" class= f 'foo.Person" scope="request" /> 



(**fe6et ike jfefrfctk 



< js p :g et Pro perty > 



property value with| 

< jsp : ge tPr ope rty name= " per son" p rope r ty= " name * /> 



tot TliSi will 
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<jsp:tiseBean> 



<jsp:us#ean> can also CREATE a kan! 

K" the <jsp:uAt'Hf ;in> ian't dtul an attribute Dbjecl (KUTWd "pcr«H m", 
ii can make onel It's kind uf the refpiesi-^tSesfiionO (<*r 
gjet8es*ipn(true)) works it firsi teatches £br«n existing thing. Inn if it 
dncsn'i lind one; it creates run-. 

Limk at the code from the generated scrvlct, and you'll set that's 
happening- -there's an iftttfl in there! Il clun ks for a bean hait'd on the 
values ol id m\<\ scope in the tag> and il' it doesn't gei oni?. it makes 
an instance ol ihe das* spec i lied in class. assigns [he object 10 the id 
variable, ihen seis il as an attribute in the scops ymi defined in the m%. 

This tag 

<jsp:useBean id="person" class="foo . Person" scope= 'request" /> 



Turns into this code in the JspSeruiceQ method 

foo. Parson person = null; ^Mt rt * hat let * !j rtfer b> 

synchronized < request} [ ^ ^ Jfe attriW « t gg ^ ^yflfo 

S(T *e 6ft W M9" tKc re * 

person = (foa. Person) _japK_page^-context.getAttribute ("person", PageContext . REQUEST SCOPE); 

. BUT, ,( tke« wjs W/)t fc JL., 
if (person = null) ( ^ »,th tkat ^ ^ ™J e ^ 

r. . it. 4v id «anaWe- 

person = new foo - person () ; Ms^ 0 "*' 

_ ]spx_page_context,setAt tribute ( ll per son " , person^ PageConteKt ,REQUEET_SCOPE) ; 



Finally, set ihe «e* object as ah 
attribute at the seope y»» defined 



350 chapter a 



seriptless JSPr- 



{ This could bee bad thfng — I \ 
don't WAN T to have a bean 

values set! If the Container J 
makes a bean using that tag, the / 
been wont have property r-^ 
^ values... a 

You can use <j$p;setProperty> 

Bui yfiu nlrrady fcneiv that ivlu'i e there's n grt I here's usually a .wl. 
The <jsp:setPrrrptTiy> tag-is the third and final bean TiLandard 
aetiun. 1 Trt simple in use: 

■■: j spins* Eteaji id= n perfl£>n w clas3= M fM>. Person" scope=" request" /> 
<jsp: set Property naiie-"parson" property^' name" valuer" Fred" /> 

/ That's worse! NOW it 
C~ means That if the bean already \ 
/ existed, my JSP will reset the existing ) 
St baan's property value! I want to C 
set the property an only the ) 
X -^__^N EW beams . . y— 
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<jBp :useBean> with a body 



<jsp;u$#ean> can have a body! 



U you put ymir settST cMfS (<j^3«jfMirp£.fty») iih/'/r the 
Ut'itly of <jffiKUSt , IJi , :iil>- the pi-ifperty spiting is iHtiiditiotiilV 
In oihrr words, i\w [HOjjfi'H value* will be w\ mi{f \[ n 
iinv bean la created, Ti' aa existing beam wiili tb*J .ha/V iind 
id arc found, the body of the tug will never run. so I lie 
property won't be reset from jfour JSP codo. 



With a <jsp:uaeB ean > bodv 
yoti can have code that ru„* 
conditionally.., ONLY ff the 
bean attribute can't t>e found 
and a new bean fe created 



<jsp:useBean id="pei. spi i" slaeaw^f^ia.PerBm*' geope=*page 



da*! 



irty="name" value="Fr 



</jsp:useBean > 




d «he it treated. 



0: 

W hy d id rVt they j list let you spec if y a rg uments 
to the constructor af the bean? Why do ydU have to go 
through the extra trouble of letting values any way? 

A: 

The .simple answer is this: beans can't HAVE con- 
structors with arguments! Well, as a Java clan, they can, 
but when an object it going to be trotted ji a bean, Bean 
Law stales that ONLY ihe bean's public, no-arg construe- 

4. rn L . . . ■■ - j I- . j . f ..i i - - i i r, I/-1-T- i 

icjr win ce triiieo. end oi sttiry. in idti n yuj uo imui navf 
a public no-arg constructor in your bean class, this whole 
thing will fail anyway. 

Q," ^at the heck is Bean Law? 

A: 

£X* The ' aw according to the creak ingly-ancient 
JavaBeans specification. We're talking JavaBeans— NOT 
Eftttfpfist JaVSBeans (EJBi which is completely unrelated, 
(Go figure. )The plain old non-enterprise JavaBeans spec 
defines what it takes for a class to be a JavaBean, Although 
the spec actually gets pretty complex, the only things you 
need to know for using beans with JSP and servlets are 



(hese few rules (we're showing only those that apply to 
what we're doing with servlets and JSPst: 

1) You MUST have a public, no-arg constructor, 

2) You MUST name your public qetter and tetter methods 
starting with "get" (or "is" for a boolean) and 'set", followed 
by the same word. (getFwf), setFoof)}. The properly name 
is derived from stripping off the "get* and "set", and chang- 
ing the first character of what's left to lowercase, 

I) The setter argument type and the getter return type 
MUST be identical. This defines the property type, 

Int ijftFoofl void setFoo(frif fooj 

4) The property name and type are derived from the get- 
ters and setters <iud NOT from j member in 1 he i lai.i. For 
example, just because you have a private tut too variable 
does NOT mean a thing in terms of properties. You can 
name your variables whatever you like. The "foo" property 
name comes from the methods. In other words, you have a 
property simply because you have a getter and setter. How 
you implement them is up to you. 

5] For use with JSPs. the property type SHOULD be a type 
that is either a String or a primitive. If it isn't it can still be a 
legal bean, hut you won't be able to rely only on standard 
actions, and you might have to use scripting. 
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scfiprtess JSPs 



Generated servletwhen <jsp:use&ean> has a body 

it's simple, The Goma&er puis the extra peep*iiy-*ett«g cod* fatide the j/"te«. 



Code in JspServiceO WITH the <jsp:useBean> body 

too. Person person = null; DttXirt t^t *<(ert.Hte utrtMt . — , ^ ( 

peracin = (fo£>.Fersun| _j£=-fjx_patjtd_cutite»:t . geLP.t tribute ("patsun", FaueCpntext .FAGE_SCOPE> ; 

if [ptmm == «wuj i 4— — Fl itf* fce , 



the specified stcpe 

_j5px_page_context*setAttribute ("person", person* FageCcmtext »PAGE_SCOFE) ; 



person = new foo .Person ( } ; 



r- ISP;' m ^ KS h« 




W tirf. wK* to ^ e dofs g 
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polymorphic references 



Can you make polymorphic bean references? 

U Inn yon Writt a <i*p:useHean>. the f^ffti attribute determines the da** or the new 

r.' (if one \% civ.iicdi. Ii aim i dcterndnei the type of the rtfirrncr variable used in 
the generated wrvlei, 



The way it is NOW in the JSP 




Generated servlet 




|persoo « null; 
Code to get the person attribute 
if (persor. — null) | ^ 
person = new 



ficope="pagt5" /> 



lint.,, what it we want the reference type in be diffrmtt from the at tual object type? We'll 
change the Person elass to make it aistnttt, and make a concrete subclass Kmplnyee. 

Imagine we wan) tltc vgtrtm-t type to he lVrsmi, and the new ftgtft type w be Employee. 



package foo,* 



public abstract C l ass Pergon , 

Private String name; 

public void setName (String M . 



I 



this •name=name; 



public String getttamef) f 
return n.=nna • 



package 



for,; 



,ublic clasa 
private 



Employee 



person 1 



public 



VOlt 



5etE mplDlint empID> I 



this,«np TD 



^inplD '• 



pub 1-1 



c Int 



q^tE«ip ru 
emplD; 



0 I 
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scfiprtess JSPs 



Adding a type attribute to <jsp;usePean> 

With tlif change* w<- just made to tlu- Person das*. \w'\<- m trouble ST 
the attribute can'l be round: 



class Person 



Our original JSP 



Sean id=" person" claaa="foc.Parson" scope="page"/> 



Has this result 

3 a va , 1 a ng . I n s tan t La t L onExcep t Lon : f oo „ Pers on 




Because the Container tries to: 

new foo. Person O i 



cfass Employee 



in1 getEmplDf) 
void setEmpltyinrt} 



We ticrfi (o make the irfrtiiiti • \;iri.il>]c type Person, and the i^ftci tea instance 
of class Employee Adding a type Mtiriluiir in the tag lets tn <!o that 

Our new JSP with a type 

<jsp: useBean id^pemon'* type= " £ oo , Person" clasB=''foo J Employee" :juope="paqe"> 



servlet 




jt»atauti = null: 
cwie ta get the person attribute 
ir (person = null) | K** - *^ 
i - f .Employee t> r &e ty* * * 



T>|«- cm he i class iype, abstract type, or an rnirriViL.-r anything thaj yon 
can Utfc i i s a declared relerrnee type l'ur the elans type □!" the bean object, You 
c;in*i violate Java typing rules, of course. 11" the class type can*i be assigned to 
the irfmttit type, you're screwed. So that means the ehus must be a subclass 
oi I'luu irir iiitplementatinti of the /i/V. 
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type without class 

Using type without class 

What happens if we declare a t?p«, but m>t a dost? 
Uncs Ii matter iT the type is at»traci or concrete? 

_ *c tU«, tff? 
JSP ^ ^ 

<]gp:useBe,sn id="person" typ*^£o0.J F **«in"' acopfe=*patje"/> 



Result if the person attribute already exists in "page" scope 

It work* perfectly. 



Result if the person attribute does NOT exist in "page" scope tf0]JT tfOf^l 

java,lang,InstantiationException: beau parsea not found within scope 



If type is used without class, the bean must already exist. 

If class is used (with or without type) the class must NOT 
be abstract, and must have a public ne-arg constructor. 



In your example, "fo<v Person" Is 
an abstract type, 50 of COURSE it can't be 
instantiated. What If you change the type trj 
"fo o.E m ployee"? Will it us* the t y p* for b oth the 
reference AMD the object type? 

A: 

£\_ NO! h never works. If the Container 
discovers that the bean doesn't exist, and it sees 
aniy a type attribute without a claw, il knows that 
youVp given II only HA| F of what 11 needv— the 
reference type but not the object type, In other 
words, you frd rent told it whrtf to make *t new 
instance at! 



Th ere i s no fallback rule that say s, ' I f you can't f i nd 
the object, go ahead and o*e the type for RQTH 
the reference and The object ." No, [Mar. is NOT how 
il works. 

Bottom tine: if you use type without class, you 
hotter make CERTAIN that the bean is already 
Stored at An attribute, at the scope arid With 

the id you put in the tag. 
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scripttess JSPs 

The scope attribute defaults to "page" 

J<" yrm don 1 ! specify 8 s^opc in dmtt tin- <js|>:us<>8feiii> or ^sp^etl'ftipe-m* tag*, 
(he Gontainer usea ilie di-i'mili of K page*. 

This 

<:jsp:u.3eBea.n id-"person" class= rr foo. Employee" s copes "pa gs*7> 

Is the same as this 

<jsp;useBean id="p&rson" class=''foo. Employes"/^ 




Don't confuse type with class! 



to ^ ** **** ge* B 



fpo Person is abstract; MR** be na^ntiac 
Person - new foo. Person (K 



type -= reference type 
class == object type 



. ^ DECLARE (cart be ciuStrSCt) 
classls wlrat you°NSTANTl«TE (n,-* - -ere*) 
type x = new cfassfl 

ntAJi n , -uc^ss k gjwa/s a cfass white type doe*"* have to 
ALIMAVS be a cfe». and lype t^fl ™ C * fi „, ihe spec „ as (he most ,nru,ta* am 

c^:"^^- — " 
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bean-rsiat&d standard actions exercise 



BE &e Container 



abitvatt diss. 

X 

Person 



void se!Name(5tangi 



Employee 



in! getEmplOQ 
void set£mplD(irt) 



Look at this standard action: 

<jsp:usQBQan id="person" type="foD. Employees" scope -^request" > 
<jap:set Property name="peraciri" proper ty=" name" value- "Fred" 
</ j2p:uf;eBean > 
. i.i'* :. .-; < jsp : get Property name^'pcrson'' property^" name" /> 

Now imagine that a servlet does some work and then forwards 
trie request to the JSP (fiat has the code above. 
Figure out what the. JSP code above would d& for each of the 
three different sen/let code examples. (The answers are at ihe 
end of Ihe charter ) 



What happens if the servlet code looks tike: 

£00 . Person p — new L o a , Erupl oy at* ( ) r 
request.setAttriiiUtBC" person™ , p) ; 



T 

(Berth disitu art in 
paekage 'too') 



What happens if the servlet code looks Hike: 

too. Person p = new Eoo . Person (1 ' 
p. setNaraef/'Evan'-J ,- 

request.aetAttT;but.e("peraon", p) : 
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I just thought of something... 
suppose wc aren't using a sarvlct 

c = n-tro;itr ^rd fhc I IT/y\L form 
action goes straight to the JSP... is 
there a way I can use the request 
parameters to set a bean property. 
WITHOUT using scrrpting? 




Going straight from the request 
to the JSP without going through 



a 

<titjai><bc.dy> 



<fennn action=* v TestEean , jsp™> 

name J < input type- w text" name- M userName"> 
TD#J <input type-^text" name-™u5erTP"> 
< input type="submit"> 
</form> 



We know ut can da it with u t&n&foaiitito of Standard actions and tcripiinii: 
<jap:useBean id-^person" type-^foo. Person" class-^Eoo .Employee" / > 

<4 per3on.aetName(requeat.getParaiiater("uaeENa]iie") | ; %> 



Wr car) rtrn tin ii uiiji ^Timing JNSrnF. fi standard acting: 

< 3 ap :ua€;Bei3n id="peraon" type=*fao. Person" clasa= 1 *fotj.E]nployfic"> 

<jap: setPr-op&rty name^'-person" property- 1 name" 

value™ w <4= request , getParaineter C'userName" ) /> 

«:/i£piUGcBeaii> 

Ves. ^ At>e 



& y<* ARB » 

™a Yes, ,i Tvir> ... " 
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using param 



The pa raw attribute to the rescue 

It's sj> simple. V>il can nd a rofjucst paraimMct flight tod ;i v]tl»uiir 
scripting using ihe^anmi jicirilun f. 



The param attribute lets you set the value of a 
bean property to the value of a request parameter. 
JUST by flaming the request parameter! 



Inside TestBean.jsp 



<j spjuseBegn i d= "person " type="fcio . Person" class=*f oo,Employee"> 

<jsp:s>et Property McUne="per30ii' T property^rsame" param»=' f userNaine" /> 
</j 3p:u3eBean> 



<html><lwcly> 

<form ■action""TestBean- jap"> 

name: <input typo="text" n c 'ijri(L'="useiNjEise'*> 
ID*: -^input type="text" najne="userID"> 
<:inpijt t ype=" submit "> 
</f orm> 

</bodyx/htmi -■ 
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Put watt! It gets even better:.. 

And all you hnvc to ilu \< niiikt' nun- yum- farm input fithi mimt iwhith becoatel 
tire pri|Ui-si iixiiiiiiirtci uanre] ]» (In- snuir .11 the pnspett} mme in yum bc4d, Tln-n 
in ihr <jfip:ictPjrpperty> tag, you doti'l have to tipejeify \hr fitfm attribute, If yon 
ii.imi' tin* pftptrfy Ijul dnn'l spi-cify ;i PO^tl Ot pmmn, ymi'rc ii'lliug ihr Container (u 
gel the Value from n ttqaral ptmimtfff with it matching name. 



If we change the HTML so that the input field 
name matches the property name: 



<html><body> 

name: ' input type^text" name™ "name" 
IDff; -'input t^pe="tey.t" name="userID' v > 
«input type="siibijiit"> 
</furm> 

</body>-;7htmi> 




We get to do THIS 



abstract /ooPefSon 



Stmg getNameQ 
tokJ selName[Slnngi 



f oo. Employee 



intg*1EmplDl) 
TOid 9e€mplD(in!) 



< jspmseBevm id="per3on" type="foo. Person* class="foo.Employee"> 

■ejapisetProperty rtame="pe:tsor]" property="natne" /> 
</ jsp: useBeanu- 




If the request parameter name matches the bean 
property name, you don't need to specify a value 
in the <jsp;setProperfy> tag for that property* 
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properties and request parameters 



tf you can stand it, it gets even PETTEfc,,, 

n.ih li wh&i laafipens If yi>u rmkz ALL ths reqiK*i pammsta names match 
rhr bran property ruinn's. Tlir/'mrw hc;m iwhfch is an instance nf Rhus 
Employee] actually Ii;l* ivu propertied oame and i-ni]>[D. 



If we change the HTML again 



namej <input type="text" name-" name^s 
IQj : <input t>pe="text" narae-"empID''> 

<inpiit l:ype=•'£l^b«U.c' , ?■ 

■c/bodyWhtml* 



absfracf too Person 



Slnng ge(Name() 
vod se^Narnei'Slnrgi 



f 00. Employes 



int gel£mplD() 
«Js*sEffl|jlD(int) 



We get to do this 

<j sp ruseBean id-"perSon" type-"f oo . Peraon" clas5-"foo. Employee":* 

< jsprsetProperty nams="person" props rty-= " + " /> 
</ jsp:useBean> ^ 



I want you to iterate 

C through the request parameters, 
_ and find" onv that match this bean's 
C3. and stt the WLUC 

in>g properties equal to 
'he corresponding 
parameter... 



Oh sure... make ME do ail 
the wark. I hove to look at 
tfiE bean class getters aid 
sttft-r 1 ? t? fi rt ur€L 5Jf the beon 
pi 'Offer' 1 ics, then rrailcb l h 
parometer nomes.. 




Container 
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Um tags convert primitive 



If you're lumiikir With J.iviilicans Irorn any earlier tilt-lime , 
this is no surprise 10 vlul. Ja\"aJlcan pftJpeitiLS run bv anrffiing. 
hul it" they're Strings pf primitiM-s. .ill the coercing Ls done 
fiir vim. 

Thill's ritrhl — you rlim't havr Hi do ihr parsing and 
conversion yuui^i II' 

If we make the type Employee 
(instead of Person} 

■-.hLn!l^<bodv> 



abstract foo. Person 



firing rjfcfW^tfftf^ ) 

VDidsettemelStnng.l 



too Employee 



imgeiEmpiDt) 
WKfsetEmplD<int| 



<jep;u5fiBean id- "person" type""£po 1 B^loywe'' cla6S-"foo* Employee" > 

<-jsp:seLPraperty name = "per son" prDparty=™' " /> 
■J j sp:i:seBean'-- 



Person is; <jsp: get Property name= "person" proper ty=" name' 
ID ia: <:3ep:qeLPrDperty name="peraQn" property=*'ei]npID w >-- 



It all works 



kiMli^ 



Person Is: J 



r in is: 343 




_ 



JJ IS, ^ v . ^ 



The <jSj» ! SctpPopcr£y> action 

In tot lUa firfpino PnminwJ 

LWVJ MLV ►JUL i-> "t, J. WJ-IWJJL, 

parameter, converts it to an ink 
and passes that int to trie bean's 
setter mefliod for that property. 
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OK, I'm thi n king that the Container t ode I * doing 
some kind of Integer.parf elmCM?"). to wouldn't you 
g el a N umber For matExte ption if the u 5 e r d oe sn't t yp e i n 
something that can be parsed to an int? Like, what if the 
user types "three" in the employee ID field? 

4: 

t\. Good catch. Yes, something will definitely go wrong 
if The request parameter for the empLD property can't be 
parsed into an int. You need to validate the contents of 
that field, to make sure it contains only numeric characters. 
You could send the form data to a servlet first, instead of 
sending it straight to the JSP. But if you're committed to 
going from the form straight to the JSP, and you don'! want 
scripting, just use JavaScript in the HTML form to check the 
field before sending the request. If you're not familiar with 
JavaScript (which of course has virtually NOTHING to do 
with Java), it's a simple scripting language that's processed 
on the client side. In other words, by the browser. A quick 
Google search on "JavaScript validate input field" should 
turn up some scripts you can use to stop users Tram enter- 
ing, say, anything but numbers into an input field. 



^ If a bean property doesn't have to be a String or 
a primitive, then HOW can you jet the property with- 
out scripting? The value attribute of the tag is always a 
String, right? 

li h potsibte {but potentially a "lot" of extra work) to 
create a special class, called 3 custom property editor, that 
5 u ppor L i t h e bean. 1 1 ra fces yo u r St ring value and fig u res 
out how to parse that into something that can be used to 
set a more complex type. This is part of the JavaBeans spec, 
though, not the JSP spec. Also, if the value attribute in the 
-.■.jspitelPfoperly lag an exptawion rather Mian a Siring 
literal, then IF that expression evaluates to an object that's 
compatible with bean property type, then it will probably 
work- IF you paij in an expression that evaluates to a Dog, 
for example, the Person bean's setDog{Dog} method will 
hiinlli'l But think ibuut il this mtMits Tin? Dulj ubjuci 
must already exist. Anyway, you're way better off NOT try- 
ing to construct new things in your JSP! Trying to get away 
with constructing and setting even marginally complex 
dsla types is gonna l>e tough without stripling. (And none 
of that is on the exam). 



Automatic String -to-primitive conversion does NOT work if you use 
WilkVlJ.' sc,i P tin 9 !! 11 fails even if at1 expression is INSIDE the <jsp:^etPrc>perty> tag. 

tfyoo use the <jsp $e1P'0pe'ty> standard action tag with the property M!dca«}. OR just a property name without a 
value or param attribute {which means the property name matches the request parameter name). OR you use a 
param attribute to indicate the request parameter Whose value should be assigned to the bean's property. Off you 
type a literal value, the automatic conversion from String to <nt works. Each of these examples converts automatically. 

<]sp: set Property name="per son" property 3 "*" l> 

<jsp : set Property najufi^peraon" property="ejnplD" /> / Tne« * B **** 

<;;ap: serP roper ty name-"pe.raon" praperty="eiripID" vaiue-"343" /> \ 

<iap: sec Property name-*person" propartv="emprrj'' p^l^am=*eBIpID , ' /> J Th s HOT work! 

BUT:. . if you use scripting, the automatic conversion does NOT work: ^ 

<-jsp; E e-t Props rty na.me-"person" property^ e.nplD" value-"**- request. getParameter ("empID") i>"/> 
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The bean standard action tags are more natural to a non-programmer. 

f In. .1 >wr-ii*i ill.. Iii.ai.il~l ■■( ili'injT liir.' j\l'ur i'r-riiiliiiii 1 1- n4liFu ' ■ I'lj ■ I I I lliu IjiiiIi ri 'I jffi MMdMO** lli-in 

» 'u». l ii ft ill 1 1, ii iy in hi 111 hi ii^iii^ iiit^.-i 11^ i -". i ij^i ii ii^ 1 1 ii ji fi i. niri i m I 1 1 ii in i' jyi'ip'i in ukw ii ■ i ii*i 1 1 

aboutjwi .ihrjava prtigironittci). AIiIiuuhfIi eveojalvs programmer'; II [id thai i-ij;-- arc easier to 

maintain than hard-coded Java stripling element*. With tin hean-related lags, the designer 
Deed* only the basic idrnliikation inib (attribute name, scope, and property name)' True, they 
An have in know the fu.l|Y-.-ij;.lif'i4 1 i IfltSs name, hut as far as die wrh page tlt-M^iier know*- it\ 
jtlst a name uilh rli.ls Q in il. Th* Wei, designer driesn'l Heed any knowledge of dial's really 
behind il, and the) ran ihink of beans as iimpl) ttcordi witk JttM.\. You tell ilie drsiuuers ihe 
record (the elans and the identifier) and the fields (the properties), 

Still, tlit* bean Hkndaid nctidtu .iren'i as rJrg&ai a* they cotiM be. 

.Inrf ffiafs it'-ftv this fotiti fill- rnef of ttit story on jfrifitltsi pQ&& Read on... 
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Put what if the property is something 
OTHER thaw a String or primitive? 

Wc know how easy it is in prim an nUribatt when ihc attribute itself 
is a String. Then we made Lin attribute that was a m m-Slring object 
.1 i'i Min \w.\m insianee). Hut we didti'i want in print the utiiilwtr 
(person) we wanted to print a pmprrty u[ the attribute iin inn 
example, lilt.' pent in\ Bdmraild rmfiUh. That worked line. hei;aUse die 
a. i hi lard actions ran handle String m«f primitive properties. So, wc 
know thai -.tandard actions can deal wilh an attribute ol any ivpc, as 
long as all the attribute'* properties are Strings or primitive*. 

Uni what if theyV tnn? What if tin- bjfsn has a property thai b W< 8 
Siring or primitive? What if die pmpeiiy is >el amilhn ( ttjjjei I type? An 
(Jbjet'l lypi- ■'•ifii h»pft!ti • •■/ 

H 7i«l r/~ Ti/rul wa//; zt'unf ta- If* print a pntprrty "f that pmprrty? 

Person has a String "name" property. 
Person has a Dog "dog" property. 
Dog has a String "name" property. 




What if we want to print the name of the Person's dog? 



Servlet code 

public void doPost (HttpServletRequest request, HttpServIetResponse response] 

throws IOException, ServletException [ 



Foa, person p = new fad, Person (If 
p. set Name ("Evan"! i 



f oo . Dog dog - foo.TJog{) 
dog. setNan>e( w Spike") ; 
p.setDog (dog} J 



^ No. ^ fee ft** 

t.MtAt tribute ("person", p } ♦ tlw£ 



RequestDi spa tehee view = reques t. getReijusstDl spat rher ( "tesul t . j sp") 
view. forward {request , response) I 
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Trying to display the property of the property 

UV know we im\ do ii wiih scripting, hui c*n wc do ii until \he bo;tn ictantfard actions? 
What happen* if we put ^doj^ in the property in die <j*p:jp , iPrriprrfy> 

Without standard actions (using scripting) ^e*iW-;- W 

<htmlxbodly> we had tf n» / 

<%= ( < £00. Per a on) request , gelAt tribute ("person**) .getDog 0 .getWai&e( J *> 



With standard actions {no scripting) 



<html xbody> 

< jsp: useBean Ld= "person" claES=" fod . Person" jacope=" request" f> 
PO^'s name Lss <jsp : getPropeirty name^'peraon" pr Dper ty= " dog " /> 




You can't say: propgrty^dog.narne" 

There's mi combination i»r Mir bean standard action* ih.n'll wotk given the uri^inal 
Krvje( code, bett&usc the D6g is nm an attribute! Dug h a ]hi»[xti\ (if the attribute, 
\a '.mi can display (be Ehs® bill you cam'i navigate to (he- Mm*- properly of the Z>g 
properly t.4 i. bit" /fet-fan attribute 

The <jsp:(fctPropcrty> Ids you access onfy the properties of the bean attribute. 
There's no capability lor nested properties, where you want a properly of a j>roperti\ 
i . l 1 1 j ■ - j ill, tn .1 property of the attribute. 
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EL to the rescue 

Expression Language (EU saves the day! 

v«->, jum iii tiaw 10 saw us, th*JSP Expression Language \.\. was 
added tit die JSP 2.H spec, releasing us From ihe tyranny of Kxjptin$ 

Look bnw beautifully simple fmrJSP is nov?~. 

JSP code without scripting, using EL 

<h t mi ><bo dy > 

Doa'n namo is: S {person . dog , name } 

</body></ht m l> ^ ^ ^ d<ja ew 



Thfs: 




Replaces this: 

<%= ( (f oo - Person ) recjues t . getAt tribute ( "person" } } . getDog ( ) , getName [ ) %> 



4* ¥* ¥ ¥ i- ¥ i + + + + *+ + * P P r r - 



You don't need to know 
EVERYTHING about EL. 



The exam dcesn t expect you to be a 
complete EL being. Everything you might typically \>so 
or be tested on. is covered m the next few pages. So. if 
you mrtt to Study the EL spec, kmpk yoursetif out. JuS! 
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^constructing the JSP Expression Language (El) 

'Ihc syntax and lSU1g£ erf I lit liii^uu^ Jre dtrt simple. J "tit- trii'ky pail ts thai JttKK "I 
EL Slinks like Jam, bul behaves difTereatly. VbuTl see when we get to the || trperatoi in a 
moment* S<> you'll find thing* thai tvouldn'i work in Java but will work in EL, and vkr- 
vcn&Jusi don'i iry to mttpjavg languagc/ayn*ax rules onto EL, and you'll Ik- tin*- . E»r 
the next lew pages, think of EL eis a way to access Java objects without using Java. 

EL expressions are ALWAYS within curly 
braces, and prefixed with the dollar sign 

$ { person * name } 



The first nam*? 

in the W r *™ 0 VZ r „ 
an implicit abject or an 

attribute. 



$ 4 firs tThilig .sec o ndTh i ti g ] 
EL IMPLICIT OBJECT ° k ATTRIBUTE 



' request Scope 
sessionScope 
apphcationScope 



pa ram 

pa ram Values 

header 
heade r Values 



cookie 
initParam 

pag eContent 



Note- ZL- ■■hflitit otjefrU art not ike 
tame ai -the ttnfhtii ohjetb Available -to 
JSP iOnftm^ e*e«ft w* ylyCwtttwi 



in page scope 
in request scope 
in session scope 
in application scope 



osm&* *m*&k *ly 



the Ifeg U-* i» the EL 



f Java vcmrdci a nap U 
a tollettop that hold* 
kcy/vaiu pain, like 
Ha^table a^d HaAMqO 
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(fie ft- ? operator in EL 



Using the dot U operator to access 
properties and map values 

Tin* lirsl variable in cither an implicit object O) BH attribute, and (lie thing 
bo tliu right ol~ ihv dol 1* cither a map Xrv (if lhi- litsl variable is a map} or a 
bean propnir il" (he linn variable n an attribute that*! ;iJyv;iHtaii. 



If the expression has a variable followed by a dot, 
the left-hand variable MUST be a Map or a bean. 



■ person. name | 



o 




The thing to the right of the dot MUST be a 

or a beai 



3> 



$ {person . name 
"nome" "Evan"! 




gctNomeO 
sBtName() 



And the thing on the right must follow 
normal Java naming rules for identifiers. 



$ | person . name i 



When the variable Is on 
the left side of the dot . it's 
either a ivup (something 
with teVs ) or a bean 




of whether the variable is 
an implicit object or an 
attribute. 

The pageContext implicit 
object is a bean-it has 
getter methods. All other 
implicit objects are Maps. 

If the object is a bean but 
die named property doesn't 
exist, then an exception 
is town. 



* Must start with a letter, or $. 

" After th,- first character , y P( , ccn 
include numbers. 

* Can't be a Java keyword. 
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The C3 operator Is like the dot only way better 

Thi i di»i i ijjt'iiHui u<irks onlv when i lit- thing or ilu' rigfn i* n btaa property w 
map k*-y far the thing on the teffe That's it But the | 1 operaier is a Ihji mote 
powerful smd flexible,. 



This: 

$ t person L*name' f J J 



Is the 

as this: 

$ I person , name 1 




The simple dot operator version 
works because person is a bean, 
and name is a property of person. 

But what if person is an stray? 

Or What if person is a List? 

Or what if name is something 
that can't be expressed with the 
normal Java naming rules? 
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but the j ,.' is better 



The D gives you wore options,,, 

U'lit-n you liah iJsh; clot 1 1| ;ci :i \< n . 1 1 ■ ■ tiling on the |eji can be- only j Map of ii b(-an r 
insil iln- thing on the r|ghl must fs » 1 1 c ■^^ Jjtva rraramg rules for ittamiliers. Rue wiih the 
| |. i he ihinu tin tin - Idt L ftn also b< ;i I.i'U i>r .hi array (of ;i ny type). Tint] ;iIko duhuii 
the thing on the ritfln < an br <i number, or ftnything thai resolves i«i a number, or ;m 
identifier iluii doesn't b el the Java naming ruleu For exsimple, you might Jiiwe a Msip 
key that's a String with clots in the name ("com .fan. trouble"). 

(l) If the expression has a variable followed by a bracket [ ], the 
left- hand variable can be a Map, a bean, a List, or an array. 

5 (muSicList i" something"] \ 




(|) If the thing inside the brackets is a String literal (i.e., in 
quotes), it can be a Map key or a bean property, or an index 
into a List or array. 



$ imuaicLijsi. i " something" \ ! 
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Using the U operator with an array 

In a Servlet 

SLringl] favotiteiHusic = {"Zero 7", "TahiU W BT" , "Ftou Frou"}; 

request. setAttribut© ("musicList", favoriteMusic) j 

In a JSP 



Music ia: ${nmsicList} 
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accessing Huts and arrays 



A String Index is coerced to an lnt for arrays and lists 

rii, IJ, fct a«msihg an way U tin- ttum jm the &L li>r acmtrag a /..■■/. 

Renicmba li.iiks, this is NOT. Java. In LL 4 thn ( | operator is NOT the array access 
operator. -\, r o T jt'j jtisi called die | | operator; i AVV- pyear, took it u|i in the spec — ii I>m^ no 
riLirnr-J Jusi i fc i < ■ ^inhnl | f. Like Prime, kind pEj Tl" tl DTD im'S b name, it would be flir 
arriiy/Lisi/Miip/lit an Property aeccac operator. 

Jit a Sftrvlfrt 

"java.u.til . ArrayLisjt f avoriteFQod = new iava.util. ArrayListtj^f 
favoriteFo(Hi.add("chai irre cr^am"); 

r a vo r i t e Food . add (" f aj i warf 1 ; 

favoriteFood. add ("thai pizza") ; 

favoriteFood. add ("anything in dark chocolate"), - 

request .set At tribute ( *f avoriteFood"* f avoriteFoodl ; 



In a JSP 

Foods are: 




First food is ${£avoxiteFood[0] ) 



"3^ 




second food is $ (favor iteFoodp % l " ]} 





a List, and the index iS a 
String literal . the index is 
coerced to an int. 

This would NOT work 

$ ( favoriteFood [ "one" ] } 

Because "one" can't he 
turned into an int. You'll 
get an error if the index 
can't be coerced. 
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[ ] and the dot 



For beans and Maps you can use either operator 

l&ffJavaiteM* ;mfj Miip, you can dtfwr the [] pffwattartfr the TOBv*fti*at d&t 
apfjaim- Jiisi clunk of map fecy* ihi" name way you iliink of piupmy names in a l.n-;ni. 

You ;isk Tin- 1 1 1 1 ■ kej Di prgpert] name, and yon j^t badti the value of 1 the feey "« property 



Jn a Servfet 



java.util.Map musicHap - new java , util.HashMap () r 

muaicMap.put("A3ubient" r *&e£Q 7") f / ... M „ -J. |DfBt 

musictfap.pBt rsuif", "Tahiti 80") ; I . J ^ ,„ ^ (fee* 

musicMap.put ("DJ", "ST"); , J ^ __l j.j.„.k.^# 

mUsicMap.piit ("Indie", "Travis") ; 
request. setRttrlbute ("muMcMap", irusieMap) ; 



„*e it i mi** p#*^« 



In a JSP 

Ambient is: $ {tnusicM&P- Ambient} 









Ambient is: Zero 7 







\ 



Ambient. L$: $ {mu si cMap 1 11 Ambient" ] } 



a* the kev ifc * 



Ambient- i^: Zero 7 



376 chapter 9 



scripttess JSPs 

If it's NOT a String literal, it's evaluated 

If there air n«> quott» injjdr fhf bracket*, the Contatfwf eviihiittt* what'* 
insirli- (he brackets by searching for mi attribute hound undo" thai name; 
and Mtlisiiiuu-s the value of the attribute* flf the« is an iniplkii object 
with th* same name, ilic imptirii objcci will alwambc uaetL) 

Huaie is; SI musician [Ambient] | WOT «rk'! Swt ttwt * "» 

Ued "A»b.«.l", to t*-" ^ k 

Find an attribute named "Ambient". 

Use the VALUE of that attribute as the key 

into the Map, or return mi J J. 

In a servlel 

java.util .Map musicMap = new java.util .HaahMap O f 
mnsicMap. put {"Ambient", "Zero. 7"); 
imisicMap.put {"Surf ", "Tahiti 60")f 
mus i cHap . put ("DJ", "BT " | > 
miisicMap. put {"indie", *Frou Frnu"); 

t&quest.setAttribute {"musieMap", musieMap) ; 
request.se tAttr i_bu te (" Genre " , " Ambien t " ) ; 



This DOES work in a JSP 




evaluates to 

Music is S imusicMap fGanrej J > Music is S (musicMap | Ambient I i 

because there IS a request attribute named 'Genre" with a 

value of -Ambient ". Find Arnbienl" is a key into musicMap. 



This does WOT work in a JSP (given the servlet code) 

doesn't c-hontQE- 

Music is S {musicMap [ ^Genre" | I ►Music is $ jntasicMap ["Genre" j I 

because there IS no key in music Map named "Genre". A 
With the quotes around it, the Container didn't try to J 
evaluate it and just assumed it was a literal key name. niJ & a v ^.d ejaf******* 

i^em'i^y^m ****** 
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You can use nested expressions 
inside the brackets 

It's expressions nil the way dciwn in EL. You ncsl expressions 
to uny arbitrary leyeL In olher words, you can pul >i 
complex expression inside a complex expression inside 
;ii h L t-|i.s gvjjujjj. And the expressions tat evaluated from lite 
inner rooti brackets- put 

This pari will srem cumplrtcly intuitive in you, because fCi 
n<t diflereni tlian n'tarmgjava code within paresis. The tricky 
part i> to watch mil fin quotes vs. me quote*. 

In a servlei 

java .util .Map muaicMap = new java .ut i 1 .HashMap ( ) ; 
musicMap.put P Ambient", ^Zero 7">; 
mu.sicMap.put ("Surf", "Tahiti 80") ; 
musicMap.put ("DJ", "BT"| ; 
musicMap.put ( w Indi&", "Frou Frou"); 
request. setAttributc- ("musicMap", rnusicMap) ; 

St ring [] mu3icTypes = ["Ambient", "Surf", "DJ", "indie" I; 
request. setAttribute ("MuBicType", musicTypes ) ; 



This DOES work in a JSP 




Music is Zero 7 
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You can't do ${foo,ju 

Willi beam and Map*, y<>u CM) ux<* ilu- dot <>|wriiti>r, l>ui only jf ihe 
ihitifr jnau type after ttie <Joi is a Ir-gsil Java identifer 



This 



$ ( tm s i etf ap .Ambient I 



But this 

StmusicListpl"] ) 

CANNOT be turned into this 

Sfimisictist.l) fJO 1 ^ ^' 



If you wouldn't use it for * 
dot. 



What prints? 

Given ttie servlet code below, figure out what would print (or rf there'd be an error, 
just write, you know, 'error'). Answers are at the bottom of stie next page. 

java.util. ArrayList nuns - new java .utii .ArrayList (> ? 
niims.addri") ; 
nums.fldd( w 2") ; 
mims.add ("3") ; 

request. setftttrjbute f"ni3mt>ers" r numa) ; 

String}] LaVoriteMitsic; = {"Zero 1" , "Tahiti 80", "BT", "Frou Ftou" \ i 
request. setAttrlbute ("muslcList", tavorireMuslc) ; 

fib $ I musicList [numbers [ Ll ] ] \ 



$ ImusicList [numbers [0]+l] ) 



(We'll 

of evadors in - few f agei ) 



$ ImusicList [numbers ["2"] ] ) 



$ ImusicList [numbers [numbers [1] ] I 
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Code Magnets 



TXni'l l»f 'in |J rin't I il yi nl Jiiid 'fimethiDg liki? 
this on the exam Icxrepl in the real exam it'll 
look... ujjlit'n. 

■Study the three classes on the page, and 
the servlet code on ihe opposite pajfe, then 

MOM tito rode magtwitJi to make the EL 

that'll produce the rcispOnsc sttflwn [n iL< 
hii3WK.tr, (Turn die-page lor the answers, bin 
mil until you DO THIS. especially if you're 
going lo take the exam.) 



foo Person 



package too: 
public ciass Person { 

pnvale Dog dog; 

private String name; 




public Dog ge!Dag() ( 



^LKUEIL. IWIU J^U IU1 I I^L_*J-Ll II l£| »IUIII U | i 

mis name-name. 

} 

public String ge3Name([ { 
return name; 

I 



fooToy 




package foo; 
public class Toy { 

pnvate String name; 

puttie void s&tName(Slnrtg name) { 
t'i 7 uan-b-'icn z 

I 

public String gatNamefl [ 
return name; 

} 

} 



V 



package too: 
pubic class Dog( 

pnvite Stnng name; 

private Toy[ ] toys; 

public void 5elMama(Slnn§ name) { 
tfiis.name=name: 

} 

public String getNamef,) { 
return name; 

} 

public void setToysfToyj] toys) { 
Ws.toysFtoys; 

} 

public Toy[ { getToysj) f 



Answers lo Siwpen on previous page: 1 1 Tahile 8D 2} BT 3) Frou Frou A) Frou Frou 
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Serv/ef code 



Compose fhe EL for this output: 



foil, person p = riew foti. Person | ) ; 
p.setNante ("Leelu") ; 
faci.Dog d - new f 00. Dog Of 
d . setName ( "Clyde" | ,- 
fdc.Toy tl = new foo.TijyO; 

fao.Toy L2 - new f do .Toy 0 J 

t2 .sccNams ("neighbor' s cat"); 

foo. Toy t3 - new fco.ToyO; 

t3.setNaine ("Barbie 3 " doll head"); 

cl. set Toys (new too .Toy [] {tl, t2, t3\); 

p.setDog (d) i 

request . setAt tribute ("person", pi ; 



r 



Leelu's dog Clyde's toys are: stick, 
neighbor's cat, and a Barbie" 1 doll 
head 
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exercise answers 



(5H 



□ 



Code Magnets 
Answers 



TKii is net the W-V way ts f **odi*te the c*»tfut but 

-fcHe only way fch* set of -^rets Bww 
e*ertr*e" wnte the EL- c*presi>c« J little differently 
(■f«-y t the i^nettJ, but prmt the sJr*e resJt 



ServJef cads 

foe. Person p = new foo . Employee 0 ; 

p.sRLKanifi {"I.eelu") ; 

foci. Dog d = new foe Dog 0 j 

d.setName ("Clyde"} ; 

foo.Toy tl = new foo.ToyfJi 

tl. set Name ( "stick" }; 

foo.Toy C2 = new foo.ToyO; 

t| .setName ("neighbor' s cat">f 

fan. Toy t3 = new foo,Toy()i 

ta.setName ("Barbie 7 ' doll hearf") ; 

d.setTt>ys(new foo.ToyU \tl, tZ, t3H. 

p-setDog (d) ; 

request .set Attribute ( "person", p) ; 



Compose fhe EL for this output: 



Leelu's. dog Clyde's toya are: 
stick, neighbor's cat, and a 
Barbie™ doll head 




${ partou.tMiiia) * m rtog $ (parser . dog ,namu i' s toys 3r«: S (p«reon.di?g. toys LCI) . 
name], 5 (person. dog- toys [1] .name! , and a 5lperson.dog.toys [2] , name) 




j^toysjl |t*ys^ 





■ ■ 

' 



on.dog.ttiyol "niwie" I 



) 



^V^™^J | S I pat son . dog . tcyn .nam 
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Five JVUnufe 
Mystery 




The Case of the Missing Content 

Dentin m-.-11-l s has treated a cuntf-nt m^na^iti^nt 
gymem used primarily fin- creating tutortafa i"i 
■ I ■ —kit *| 3 application^ Pari <>f the applied km -ill" *v.s ^ 
cfttltenl drvclupcrs to Create "Hp of ihr Day" chunks 
of Content, which arc stim'd in the lequcsl-scoprd 
attribute currentTip. L'i u sample, if the tip was 
'Wash your hait every tither day." then the screen 
wnnU\ include .1 box like (his; 
















The JSP code for this tip box ir. 



<dlv claas= 1 tipBox 1 > 

<ti>Tip of the Pay;</b> <br /> <tar /> 
SfpsgeContent..n]rrftnr.Tlp} 



A new client t* trying to create a tutorial u&itig the 
tjpiitem, l»ui cSttt'l seem to j^i-i (he tips to display 
correedy Kir example, thr tip "<b></l» tags make 
things bold!" is rendered like ihis: 



L, \Vlu*t gives? 1 ' exclaims Tawny, the client's lead JSP developer. 
'"Where did the beginning of the tip go? Why didn't the hold 

tags get displayed?" She issues a bug report immediately In 

Dm-timf-iir.^R-Us. 

What do yu)t think? Did the bold tags get sent to the 
output strettnt? Why arvn't they being displayed? 
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raw html 



El renders raw text includin g HTML 



I'll, mssiviy ia solved wh«?o you boti su 
the actual HTML thai v> generated,., - 



>>.., the "<b></b> w portion of the tip 
is being sem in the output stti'Lim. but 
the web browser is simply re tide ring it 
its r-iw HTM i. b) bolStng an erajjX) 
splice h in, the page, 

So, of course the user does not gee the 
*<b></b>" tags on the screen. 



<div <nloG£i~ " tipBoK ' > 

<b>Tip of the Day :</b> <hr/> <br/> 

$ j pagecontent . currentTip ] 
</div> 



A. 




HTML that's gen&rated 



<:div class=' tipBinx' : 



of the Day:</b> <br/> <br/> 
ags make things fculdl 



<div clasc^'tip&ox'* 

tb>Tip of the Cay:</b> <br/> <br/: 
c%= paqeCont^rit .getCurrantTip () %>" 

< /div> 



^ HTML ^ *r< 

delayed as 



and for the jsp.'qe If roperty standard action 



Splayed as ^ 



div cJ.daa=' tipBox' .- 
^favrip of the Days-r/b-- *hr/> fhr/i 




FLEX YOUR 



OK. so (he tip siring is being sem to ctre output stream, bul 
Documents-R-Lis wants to convert HTML special characters into 
a formal that is rendered properly in their bps. So we want lo 
send "i^u 11 in order tor ttie user to see Ihe actual < character in 
the browser and "Sgt;" to produce I 
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How would you accomplish this? 
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fteniamber that my HTML form 
action goes straight to the 
JSP... w there a way I can use the 
fullest parameters just using EL? 




The EL implicit objects 

Rente tuber, EL trsssmn* iirtplUft object*, Bui l&esfe 
.ire ri[»i the same as the JSP ini;i|icii ithjeciH fexCRfW 
fnr une, pageGofltCXt), Here'* it quick tisl: we'll look 
;U some of them in mure detail OB the ikxI low piiuyv 
You'll notice lhal all but one (pngcContcxt again), are 
simple Map*— name/ value pairs. 



page Scope 
requests cope 
sessionScope 
applicationScope 



pa ram 

pa ram Values 

header 
header Values 



faft of the 



cookie 



LoAd it be A M3f ot fco*kiej<" 
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pat am and paramValues 



Request parameters in EL 



Pisce i el" L-altL-. Tifi putAin irupEf-u ohjet't Sue when y<>u know jiru taw ouh 
i irn- parameter liar thai parlitmlai* parameter namiv Usl 1 parnm Value* wlnn you 
m.igb.1 have in<w than ob« piMrameter vahie fir a pvru patjtfBCtef name. 



In the HTML form 

^form action="TestBean. jsp" > 

[iame: <input type-''text" name- "name" 
ZD*; < input type="text" name="*npID 1 ':-- 

Fir at food: ^Lnjiut type=''teKt" ri^a&="toe>d" 
Second food* < input type -"text" name- "food"'- 

<cinput type-"submit"> 
</form> 



In the JSP 

Request param name is: $ { param . nanus ) 

fteque&t paiaft CtirplD L-.: $ [param* amp ID) 

Request param food is: $[ par an. food! : . 



Firat toed request pacisir $ {paramValues . f ood[ 0 ] } 
Second food request par am.] ${paramValues . f ood [ 1] } 



<4*^ J i te vser fill » WW 



:* , ^ p* j ***". >* *n 

Set only tht f,«t vjL e ' 



iir soe 



Requ.es t pa rain natr-e : $ ( pa ramVa luea . name [ 0 ] } 



in the client's browser (client fills in 
the form and hits the submit button) 



■■■■■■■-'■■■■■-■■■■■■<■■ 




2E 



First food: 



Mncaroui A Cheese 



The response 



Request param name is: Huffy 
Request param empID is: 42? 
Request param food is: Sushi 
First food request param; Sushi 
Second food request param: Macaroni & 
Cheese 

Request param name: Fhill': 
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What if you want more Information from the request? 

What it j»u waul, say, tin- seivt'j lujst inlomiation that Comes with thr "host" leader in 
the ivqueu? If y»ii I'" k in flu- HtcpSeryklRfiquesJ API, yrm ran «t u ^eiHeadei^Sirmfj) 
riii-i hurl. \\V know thai if we pass "liwi" i<> the gelHeaderM iikiIrhI. we'll jji-i I Kick 
aomethiag like; "InralhusuiJOtM)" (bocattte that's where the Web server is]. 

Getting the "host" header 

We know we can do It with scripting 

Host is: request .getHeader ("host") t> 



But with EL, we've got the header implicit object 

. , , ffaf „f all the leafo* 

Host i 3 ; $ {header I "host" ] | TVrf tead <r mF U-t Af* ***** " ^ toaer ^< a*d 
Host i B! S ( h ea d e r.ho S t> ^« ^ ^ T^tL^ ^ 



Getting the HTTP request method 

Uh-i>h- This is 4 Link- trickier... there's a method in the 
IInpSenklRcqucsl API for gctMcilnffli), lliat returns <iET; POSTJ etc, 
lint how do 1 get it using EL? 

We know we tan do ft with scripting 

Method is: <%= request .getMet hod () %> 

But with EL, this will WOT work w J W KO' T>**e 

ot j ett ' 

Method is: ${ request .method! — ^ 



And th/S will NOT work , ^ m \ TW £ ^ "T 1 ** 



Method is: ${ requests cope .method} rt^es^tffc, * LiC 



Can you figure out how to do it? 

Hint: look at the other implicit objects. 
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scope maps are NOT she reaf object 



The requestScope is NOT the request o bject 

I'll. MNjilii ll H'f|IH S<>Si itflf IS jus I .1 A I ; . 1 1 ...i 1 1 ii' |.'1|H. si -i ;iUj ihlih'V 

mil the i -i ■ 1 1 1 1 1 ■ l abjfccl itsHf! Wlini yon want (the JHTTI' method ia .i 
prsptrty af the requesi abject^ nol an attribute ;n reqpcM scope. In othei 
Hvrn tk you warn something thai comes frora calling a pciier method on 

[he request abject [if wc treat titer request object like a bean). 

Bui there is ou request implicit object, only requcstScopci What to do? 

You need something rbr-... 



through Pa geCo„%« ' ^ need *° 3 ° 



Use pageCorttext to get to everything else. 

Method is: $ { pageCon test t - reque s t . me thod } 

pageContext has a request property 
request has a method property 



* lo easy to W* -y. «^^ 8 jS«^^ 
flut /ufl as wje/r reqtisstScopo and n© requ ' ^ „ o(h _ 
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If EL locks through alt the 
scopes anyway, why would 
I ever use one of the scape 

irnp licit objects? The flnly thing I 
can think pf is o naming conflict, 
hut I wonder if there might 
bd Another' riMicn. 




^ ^ ft* < *u7ia£ 



« ,« U put th< 



Scope implicit objects can save you 

II all ynt need is iq prini the name of .» /«n-«, and yp« realty 
don't care what scope the is in (or, you do care, hut ynu 
know there'* only out person out of all four scope*), you jusl 

me 

$ {person. name} 

Or. if you're worried about a potential naming conflict, you 
can lie eXplkit Lilioi.lt which person vou li.mt: 

$ I requests cope .person-name | 

Hut i.i Lherc another reason you might have to preface the 
attribute with the implicit scope object? Other iluui to 
co nt to I... scop in 

□ link oln ml i hia scenario: if yon) haw a name th.u's inn 
in quotes in bradtf.ts | |. that means ii MUST adhere to 
Java miming rules, right; 1 Here, we're * *K, because person 
is a perfectly legal Java variable name. Bui that's because 
Minli'iv lirn . ^otneoiie said, 

request . setAttribute ("person", p) ; 
But an attribute name is a String! 

String don't follov Java Variable (MUttC. nlles! 

1 1 mi mean) someone pauW »y? 

request . set Attribute f"£o© . person" , p) ; 

And thcji you'd be in trouble, ljecau.se THIS won't work: 
■ S|£oo. per son. name} 

But Yollll br- so lliarikful fo| SCOpC objects, because Using a 
scope otsjecl Ids \<>[\ jwhcl to lhc I 1 operator, dial < an lake 
String names dial don'l conform to Java naming rales, 



you are hero * 389 



two more implicit objects 



(retting Cookies and tnit params 

WV'vr lookt-il .11 all rJii' implUii object* except ttwktel and iitit paraim; w here 
we are. Ami yes, any of the implicit objects <an show up r»n rh« exam. 



Printing the Value of the "userName" Cookie 



We know we can do it with scripting revest <Vtt NOT \*it a 

ittCcokkftoo^^i^e 5 method' We 

<% Cookie M cookies = request .getCookies < ) ; i,a*e to ^ the whole Cookie array 

few littt 1 = H 1 < ^-.oklcs. length; i++} | iterate thfro^h <t our«l«J 

if f {cookie-sti] *getNarce{) ) .equals ("userName") ] { 
iiut,println (cookies [ i J .getValue < } ) ; 

I 

J |> 

But with EL, we've got ft. CooKie implicit object ^ ^ ^ ^ ^ ^ ^ ^ 
$ { cookie . userName . value ) t ».« baik fro-> the A1*Y Cpokic .*.es/»*l«» 



Printing the value of a context in it paramete r 

We have to configure the parameter in the DD Rei».rmW this 5t you tonf tyrt 

£«te*t faf^ide) JW* 

a« MOT the as ietvlet bit ?a»-3mi 

<context-param> art r«yi 

<par am-name >ma i n Ema i 1 < /pa r am- n.ame> 

<param-val ue> 1 i kawecarei? wac kedl y sso rt . com'.-/ pa ram-va lue > 
■-../con text-pa ram ■ 

We Hrgw v;e can da it with scriptag 

email is: <%= application. qetlnitParameter {"mainEmail") i> 



And with EL, it's even easier 

email is; $ {initPacam.mainEi&ail} 
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The EL inltParam is NOT 
for params configured 
using <imt-param* ! 

Mmbs what* confusing; mV® fft» pa™™ 5 ^ 

use ^rr^T-param* but the BL ^> a [^f^ 
* for context params' Kad (hey consulted us, we 

but ones again. Wiey fagotto as* us. 



scriptless JSPs 




She doesn't know about EL f unctions 

When ymi need a Utile extra ln-Jp How. say; ajkva tacthoti, 
Inn yum i.li un w;inl MTtpLiruj, you can uic nil EL t'unetinn. It 's 
euy tvav to write a .simple EL expression that falls a static 
method in a ptaiti uld Java cla** ihat you write- Whatever the 
method returns h usrd in ihe expression. It doe* take a tiny 
bil iiku-c work to con%We things Inn ftUTCtiora gflwe you a 
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functions in 

Imagine you want your JSP to roll dice 

VduVc decided it would l><- awwanw in have a webrtswcd dfec-f^ninf 
service* Tlwi way, untead t>f bunting around behind desks and in iln- 
snl";! cushions |hr iW dice, « usr-r uuild jusi go to your web page-, click m> 
iLic virtual till r. and woila! Thry roll! 101' cmirw. ycui li;ivt- no idc;i lhal a 
Google search ivill probably bring up, oh, about 4,4^0 sites iIki! do ihis.; 

(T) Writer a Java class with a public static method. 

Thts is jusi a plam old Java class. The method MUST be public arid sialic, and it can 
have arguments. II should (but isn't required to) have a non-void reiurn type After all, 
the whole point is to call this from a JSP and gel something back thai you can use as 
part of the expression or to print out. 

Pus the class file in Ifie WEBJNFyclasses directory structure (matching Hie appropriate 
package directory structure, jusi like you would with any other class) 



© Write a Tag Library Descriptor (TLD) file. 

For an EL function, the TLD provides a mapping between the Java class that defms the 
function and the JSP Dial calls the function. Thai way, the function name and the actual 
method name can be different. You mighl be stuck with a class with a really stupid method 
name, for example, and maybe you want to provide a more obvious or intuitive name to 
page designers using EL. No problem — the TLD says, "Tins is the Java class, this is the 
method signature for the function (including return type) and this j .s the fiame we'll use in 
F. expressions ' In other words the name used in El doesn t have to be the same as the 
actual method name, and the TLD is where you map that. 

Put the TLD file inside the WE8-1NF directory 1 Name it with a .lid extension. (There are 
other places trie TLD oan go: we'll talk about that in !he next two chapters.) 

(3) P-t 2 tsglib directive :rs your JSP. 

The taglib directive tells Hie Container, "I'm going to use this TLD, and m the JSP. when I want 
Id use a function from Ihis TLD , I'm going to prefix 11 with this na me. . ." h other words, it lets 
you define the namespace. You can use functions from more than one TLD : and even if the 
functions have the same name, that's OK The taglib directive is kind of like giving all your 
functions fully-qualified names You invoke the function by giving both the function name AND 
(he TLD prefix. The prefix can be anything you hke. 



Use EL to invoke the function. 

This is the easy part. You just call (he function from an expression using S(prefix:name(}}. 



392 chapter 9 



scriptless JSPs 



The function class, the TLD, and the JSP 



TV tatt™ method MUST 
be H>l* MP 



package igo; 

Public ciaas Di CB HoH e r j 

P**« static n,t roUwSVj 



The Tag Library Descriptor (TLD) tile 

<?xnd version="1.0" HSiicoding="IS0-SS5 W ?> 

<taglib xmlns= , "http: // java.sun.com/xml/ns/j2ee" 
xmln s : xs i= " ht tp : / /wm . w3 . org / 2 0 Q 1 / XMLS chema - inst an ce" 
xsi i □chGtndLacatiori= ly, http: / / java . aun . com/ xml/ris/ j£ee / web- 
j sp tag 1 i b rary_2_0 . x sd " ve r i i p n- " 2 . 0 " > 

<t lib-version:* 1 .2</t lib -vers ion> 
<uri>DtcfiFunctiDTis</uri> 
<f imct±o<n> 

< name >rol llt< /name> 

<f unction -cl aas>f oo . D±ceReriei<7ftinct ion-ela s a > 
<f unction-signatureJ 

int xollDice ( ) 
</ f DTiction-aignat.ure> 
</function> 



* 0he j. 



Th e JSP 

<%9 taglib prefix 
<htna>^body> 

5 ttiiiiiB : ro J i It () } 




"Dice* 



«4g * £W 

The -ri - *« N*,**^ 
WU fee CW*~ 

vfe. fe< JSP mv^t^t^ 



1 



The 



nan* 



(vow 
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deploying wtth a function 



Peploymg an app with static functions 

Thi* only thin^ that*s npw heir is the '"niyFuiKUons.tEd" Jil* ■. El. has lo bp 
somewhere within WlilMNF or one ol its suhdirectones i unices it's deployed in a 
,|AR (lit*, but vvii'll talk iihmuL iIi.m lata in the book). Her*-, because litis app is sit 
simple, we have I >■ »i 1 1 the 1)13 (web.xijil) and. the TU1 fmyFuoctions,tId] at the tgp 
level of WFB-INF bul >'<Hi organic 'Ik-hi inKi suhdirectorBW. 

Tin- fey poijil is that the eiaxt viitli ' Ht- static FLtnctkin MUSTbe available dp the 

so... for iK>v\. yi.m know th;it putting il inside AVEB-INFAl.tsso will Work, 
And retnember lhal in the Inglib directive in thrJSR Wt specified i L RJ dial 
mutches tJic- L:R1 declared in the r [*LD. For now, ibiiik >>! the L Rl aa simply 
tt*Aflf(?i l i?j*_'vow decided to name the. TLD. Iff- jLM .1 n-aiir In \hv urMi 
chapter on using ctiatofB tap, we v B ga iqto all the details about TJ*D* and URIb 

<%@ taglib prsliK--"mine" ur i -"PdoeFunctiQna "*.:■> 



,T, 



the <ivri> ihi.de the TUD 




myFunctic^.tld web.xm! 

cian, method iiyJt» re < 

TV Jaw . 




The class witli the function 
(the public static method) 
must be available to the web 
app just like servlet, bean, 
and listener classes- That 
means somewhere in WEB- 
IKF/classes.*. 

Put die TLD file Somewhere 
under AVErHHF, and mate 
sure the laglib directive 
in die JSP includes a uH 
attribute that matches the 
<nri> element in the TLB- 



DiceRo Her. class 
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Di ii i i I >' CtV je stilus 



A regular sCriptlet expression MUST 
return so me thing. If you s<sy <%=foo, 
g ft f o o 1 1 g f t F i> o i ) n i u 1 1 N Q T 1 1 av« a void 
retu r n Type. (At I ea st that 's what y &u sa id 
earlier.) So I'm thinking iff the same with EL 
functions? 

.A. * No! It ' j NOT the s ame with EL functions, 
a Ith oti g h j u it abou E eve rybody fin d s th at.. , Sur- 
prising. Think about this— if you're calling an 
EL function that doesn't return anything., then 
you're calling it just for its side effects'. Given 
that part of the goal for EL is to reduce the 
$ tnOU 1*1 1 Of lOglC in ft JSP ( & JS P is iilfipoied tip 
he the VIEWIJ, invoking an EL function just for 
in |1de effects doesn't sound like a goad idea. 



0 : 

\, How did the Container find the TLD? 
The UR! doesn't match the path or file name 
of the TLD. Wast hfi a miracle? 

A: 

f\ Just the question we were hoping 
someone would ask. Ves, you're right — we nev- 
er did tell the Container exactly where to find 
the real TLD file. When the app is deployed, 
the Container searches through WEB-INF and 
its subdirectories (or in JAR files within WEB- 
INF/libJ looking far .lid flies. When it finds ane, 
it reads the URI and creates a map that says* 

"tho Tj_Q »rith thic IJRj it ijtn My thit f\\a jf (hit 

I o cat ion..* The re's a littte more to the story that 
we'll covet in the next chapter. 



* Can an EL function have arguments? 

A: 

t\. Definitely. Just remember in the TLD la 
specify the fully- qual if led c lass run it 1 {unless 
it's a primiti ve) for each argument. A function 
that lakes a Map would be; 

<funetion-signature> 

Lot rollDice ( javaiUtll.Hap) 
<-{ f imction^sign.atu.re> 

And call it with S{mine;rollDi«(aMapAttribute)) 



The METHOD name is not the 
same as the FUNCTION name! 



iLfemorize m relationships between we c/ass. the 

TLD land the JSP. Most m**"** f 
UFTHOD nwe does NOT have fo natch the FULT ON 

ZTsTd. The +n«* * SF 
(o fe/J Jfte Container wnrcn method fo cat! when 
uses the <ffiinw>. 

EXCfPr for the <n 3 ™> fag? So. cJon'f be tootet by 

too . DiceRoUer< , f U nction-claSS> 
<: f unct ion- S i-g n a tore S« 

iiit roUDiceO 
</functton-signatore> 

</£unctiofl> 



ccrrecf tag for the function name is <neme>! 



c function^— ^° oi1 

<neine>ro 1 11 1< I name? 

<£unct:ian-cLa3S> 

f g o.DLcePoUer</func t lon- C l fl5S > 

t fanction-3i.gnatuce> 

int rolfUicel) 
</f unction-signature> 
</fuficti.on> 
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EL ■: 



And a few other EL operators,,. 

You probably won*i (and siuiuUu'i) do caWutatkitw and logic from lib. Item ember, 
a JSP i^i i Ik Vte*y; and ihf View's joh is in render ihe retponae', men (o make Rifi 

liiijj' 'M.iii" I i- - ii- llij l'i i .i i'-i-ifnu. ll <vil i>iiliti. in. sin 1 ., I ,ii - 

normally the- job of the bontrollfer and ModtL Bat lesser Jlinnirnialiiy. ymi'vc jgoi 
custom lags {including the JSTb lags] and ILL Hi nctions. 

Bin,.. Ii»r link' things, sometimes .1 lililc urithmciii" or n simple boolean lest niii;hi 
. Him- in handy. Sn H with thai persprclivr. here's a look at the most useful EL 
arithmetic, rrlaimnal, and logical operators. 

Arithmetic (5) 

Addition; + 



Subtraction: 



Division: 
Remainder: 



I and diV 
% and mod 




&V W* way 7™ * ' 

^ infikIty- «a * 



&& ancf and 

|| arte/ or 
I and not 



Logical (3) 

AND: 
OH: 
NOT: 

Relational <61 

Equals: 
Not equals: 
Less than: 
Greater than: 
Less than or equal to: 
Greater than or equal to: >= and ge 



== and eq 
1= and ne 
< and It 
> and gt 
<- and le 




Don't use EL reserved wof ds 
as identifiers! 



You can alte»fy sm H of them on ttijs pa9*- | ' ie 
aSSc operas Bol there V9 9 few 



true s ijoci'tsan siisml 
nu fl ft means,., ndf 



the rulufel 

an operator to see (f aoflwWftO < s nu!t or 
empty (90 SfBJnpty AW wftiWtt fn» if A g 

later in the chapter) 
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scfiprtess JSPs 



rpen your pencil 

Look at the serviet code, then figure out what prints next to each EL expression 
You'll have to guess in a few places, since we haven't cowered every possible rule. 
This exercise will help you figure out how EL behaves. Hint: EL is flexible anct forgiv- 
ing. Another hint, the actual nine answers are printed at (he bottom of this page up. 
side down, bul they are NOT in any order But if you really need help, at least you'll 
have the nine answers and you can use elimination to figure nut where Ihey all go 

Given this serviet code: 

String num = ™2"t 
request, set Ac tribute ("num", ntiml ; 
Integer i = new Integer (3) J 
request. set Attribute ("integer", i| ? 

java.util. Array/List list = new java.util.ArrayList () ; 
list. add ("true") ; 
list. add ("false"! ( 
list. add ("2") f 
liSt.addTJD") ; 

request. setAttribute ("list", list) / 

What prints for each of these? - n atfJ ,i a tle. ^ 

SUUWl > 3} 

SI integer le 121 

S | reques ts^ope ["integer"] ne 4 and 6 le hum I I false] 

$UUt[D] n list["l"] and true> 

5 (nam > integer I 

$ixatm — integer-!) 



<')sp! useBean alas£= w foo. Dog" id="tnyDodj" :> 

< j sp : set Property name>-*myDog" propert ^-"name" value-"? ( list [1 J 1 " / 1 
</jspfU6eBean> 

S 1 »yDog . najtie and truel 

SU2 div 01 
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EL opera tor answers 



rpen your pencil 



Given this servlet code: 

String ruim = v 2 N i 
request, set Attribute ("num", num) ; 
Integer i = new Integer<3)j 
request. setAttribute ("integer i) t 

java.util.firrayList list = new java. uti 1 .ArrayLi mt (J ; 
list .add ("true") ; 
list. add ("false") t 
list. add ("2") ; 
list. add ("ID") ; 

request. setAttEibute riist", list) t 

What prints for each of these? 



^integer U 121 b^P*'**^ ' r _ t» f i*« 

See "7°™ J 



W 
fake 



$freqiteptScope["int<?gei*J ne 4 and 6 le num || false) **' tt r r", 

_Z!* ${list[0] li list["l"] and true) <Jen'l ^.^^f i. ^ 

J*^ & I n ubi > integer I , , J t? Tffii 



■^jsp:useBean class~"foo. Dog" id-"myDog" :• 

< j sp :aetPrciperty rjame^rayDog"' prepeity='*n.iHie" value="S (list [1] I " y> 



fake 



5 f my Dog. name and true] 



Wf y«. c Jh MJe ^ 



k flw fy $|4Z di 7 01 '"idejfcj/ 
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El handles null values gracefully 

A key dengri daemon (bts developed of Kl, eame up w\t\i 

in handle mill values without throwing exceptions, 
Why? Became they figured "h's better lo xlimv h [>;ini;il, 
inobmptcM page than n> show ihe user an error page.* 

Assume thai there is nof at] allrihute namrd lW*i but 
there IS inn attribute named * L bar'\ but thai '''bar" docs 
ni rl have a property or key tunned "Too". 



EL 


What prints 


$|foo] 
$ [foo [bar] ) 
$ [bar [foo) 1 
$ [ foo.bar) 




$P 4 foof 
51"? / foo[ 
$17 - foot 


7 

Infinity 
7 


|* ****** 


${■1 % fOOf 


Exception is thrown 


SI"? < foot 


false 




iffy* — foo» 

!?li>>T. — fool 

$1"? != foo) 


raise 

true 
true 


"~ ***** the ^fc^ 


51 true and foe^ 


false 




Sltrue or fool 


true 




?|not foof 


true 






ilKriendly. 
or 

page still 
displays, even if if can't 
find an atti^ute/properfy/ 
ley with the name in the 
expression. 

In arithmetic, EL treats the 
null value as "zero". 

In logical expressions, EL 
treats the null value as 
"false 11 . 
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JSP Expression Language (EU review 



BULLET POINTS 



EL expressions are always within curly braces, 
and prefixed with a do)lar(S) sign J{expression} 

Tbe first named variable in the expression is 
either an implicit object or an attribute in one of 
tie four scopes (page, request, session, or ap- 
$icalk?n). 

The dot operator lets you access values by using 
a Map key or a bean property name, for exampte 
Sffao.bar) gives you the value of bar, where bar 
'is the name of Map key into the Map roo. or bar 
is 1he property of bean too Whatever comes to 
Hie ngh! of the dot operator must follow normal 
Java naming rules for identifiers! (In otter words, 
must start with a letter, underscore, or dollar 
sign, can include mantes after the first charac- 
fer bul nothing else, etc ) 

You can NEVER put anything to the right of the 
dot that wouldn't be legal as a Java identifier. For 
example, you can't say ?{foo.1} 

The f ] operator is more powerful than the dot. 
because it lets you access arrays and Lists, and 
you can put other expressions including named 
variables within fhe brackets, am? ycu can nest 
tticm to any level you ran Gland 

Fnr owampto jf fTiUJ'ELjSl il SHI AiT3 ,J LiS! "OU 

can access the first value m the list by saying 
S{muSEcEJs(pD OR SfmusicListfO'J}. EL doesn't 
care if you put quotes around the list index. 

If what's inside the brackets is not in quotes, the 
Container evaluates it. If il is m quotes, and it's 
not an index into an array or List, the Container 



Alf but one of the EL implicil objects are Maps 
From Ihe Map implicit objects you can gel 
attributes from any of the four scopes, request 



parameter values, header values, cookie values, 
and context init parameters. The non-map im- 
plicit object is pageConiext. which is a reference 
to..., Ihe PageContext object 

Don't contuse ihe implicit EL scope objects 
(Maps of the attributes) with the objects to which 
the attributes are bound. In other words, don't 
confuse the requeslScope implicit object wtth 
the actual JSP implicit request object. The 
only way to access the request objecl is by 
going through the pageContext implcil object, 
(Alihough some of what you might want from ihe 
request is already available In rough o',\w tl 
implicit objects, including paramfparamVatoes, 



■ EL functions el low you to call a public static 
method in a plain old Java class. The function 
name does not have to match Ihe actual method 
name! For example, ${foo:rolilt()} does not mean 
that iheme must be a method named rollHij in a 
class thai has a function. 

* The function name (e.g . rol llfcf}) is ma pped to 
a real static meltiod using a TLD (Tag Library 
Descriptor) file Declare a 1unc!ic.n using the 
<iUnctlorp element, including tbe <name^ of 
ihe function (.-oililiji, ihe fully-qualified <func- 

tion-clB35>. and Itie <function-sig natures- which 
includes Uhe return type as well as the method 
name and argument list. 

■ To use a luncuon in a JSP you must declare ihe 
namespace using a taglib directive Put a prefix 
attribute in Ihe taglib directive to tail the Con- 
tainer Ihe TLD m which the function you re calling 
can be found. Example: 

taglib prefix = "mine" 

uri = " /WEB- INF/foe . tld" % - 
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layout templates 



Of COURSE we'll talk 
about layouT tempiarts. 
If ANYONE knows obout 
fcusoblc componcntd if a a 
Java programmer. 




You liaVt headers on every page on your web 

site, Thi-vV ahvaVr. lln- MH1U-. Von Il.iM T I j ■ - 
.sun H J toott'i' on every pan*' :is well. How >ni]iid 
would ii be W Code in tin- ^imr header and 
loolrr tags IfltO evn-yJM' in your wd> dpftf 

If you're thinking lik* tijavo pi i -grain nurr 
■ xvhirh ol coutm* yon arc), you know that 
doing that is about us un-(K) as ii gets. 
The thought of all thai duplicate code 
pmbahly makt* you ted ft little sifk. What 
happen* when the dte designer makes, oh, a 
liny lillh- lo the hcadn or IV.oU T ; j 

You have bp propagate the change everywhere. 

Reins, There's a mechanism lor handling thi-. in 
a JSP — it's tailed include . Ynu write* your JSP 
in 1 ] j 1 ■ ibMLiJ iv. iy. cxi r|>i dial iusttMdi.il' putting 
the reu»«ble shift' explicitly into iheJSP v. m'n- 
androrrng, ytui itiiaenil it'll die Container to 
inctmtt the otlirr ]]!«- into llir exiting p.m*-. ;<! 
ihc location you sele< 1. It's kind of like saying 

*html>*-U>dy> 

</-- itutrt i/ff headtrfilt litre --> 

Welcome to our site... 

blah blah blah more slull' here... 

</- - imtti tttt ■ footer Jiff tint - -> 

</hody></htnil> 

Lit ilii* iection we'll look at two different include 
methaniiinwi (he tndude Ortttkt and ihr <j»p 
im-iu.de/> suadeid Mim. 
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scriptless JSPs 



The include directive 



Tin* Include djmtivf tells tfw LWiiim-r one tiring; fo^ everythmg in ttie 
in<hit!?il [He liiu! ^Wjffe it mt« thii file, righ< here. .. 



Standard header rile {"Header.jsp") 

<html><body> 



<img src"iinage3/Weti-Servicesopg" > <br> 

<e»m><etrcing>We know hew to make 30AP suck lesa .</E>trong></em> <br> 
</ body ></ html > 





| * r o c + n:!p > •'iDcalhgsl SDBWtesls/Header jsp 










We A-ijww fiww lit make MAP suck less. 





A JSP from the web app {"Contact-jsp"} 

<html ><hody> 

<%@ include file=" Header . jsp"!> 

<br> 

•:G!ii>We can help.</em> <hixbr> 
Contact us at: S I in it Par am. ma inEsnaiij 
</ body ></ html > 




Wu Jtnow fitw to mate SOAFfttdt fej*. 
Hfe COM 

Contact us at: likewecareft' u'lckedlystnaitcom 



THIS IW^*B™ 



in 

.'■til 
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<}sp;mclu(je> i tandarcf action 



The <j$p:include> standard action 

The <jsip:iin |ude> MAndttT^ ,n t~iin\ uppmt to do the man 
thing as the include directive. 



Standard header file {"Headerjsp") 



<imq sr£="iiihacjes/Web-5erviees. jprj" > <br> 
<em><strong>We know how to make SOAP suck less .</stEong></em> <br> 

< /body >< /html - 




We Aww tuw m make *>fiAl l suck lens. 



A JSP from the web app ( u Contact.jsp") 

<jsp: include P age-"Header . jsp" /> Z — ^ H«a<i»}*? ^ ^ ^ 



<(=jn. > We; can help.-"- /ecu' <br><br 
CoRUet us at* St itiltparain.ini, ihEmatl > 





mco 


j+j ^ h«p '/localho3(-8080,1e3ls/Cont8rct.j3p i.tid^e ■ 







We know Uow in make MlAl'xttclc tew. 
Hi? can hffp. 

ConlacI usal: likcwccarcta wickcdlvsmajlcoiE 
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scripxless JSPs 

They're NOT the same underneath.,. 

The <jsp:jstt iu<Jf /> standard action and the include directive look th<- *aii)t\ and 
pften nivr ihi- same result, but lake a look 01 the generated servlcis. Wb riH »k tins code 
directly um of ihr JspServi<-e».;- methfltl From Tomcat's tral^d servlet code.., 

Generated servlet code for the header file 

cut-write ( ,, \r<htral>\3:<J>cidy>\r<:iing s re=V J images /Web- Se rviees - jpg\" > 

<br>\r<6iXatroftg>He know bow to make suck le*a .</strongx/effl> <br>\iAr 

body>\ r< / h tml> \ r* J 



Generated servlet for the JSP using the include directive 

out, write r<html><body>\r J '') ; . LJj 

out. -Mrite ("\r<html>\r<body>\r<.Lmg sic=\"uiiages/Heb-3ervices , jpg\ " > 

<br>\r<em><atxpng>We know how to make S-QAP suck less . </strang></em> <br>\r\r 
</body>\r</html>\r"> f 

Gut.vrite("Sr<br>\r\r\r < :eni>We can help.</e:n> <br><br>\ t\rCont act us atj w ) ; 
iiut .write ( ijava .lang. String) org. apache, jasper . runt ime. PageContext Itnpl . 

prupeietaryEvalLjateCS ^ lriltPar irti.tnaliiEinall I ", }iva.ld)icj.Stf Lnq.L-ldfli, 

(PagcrJontext)_jspx_page_context, null, false* ); 



o u t . w t i to t * \ t \ r \ r < /bod y / h ttnl >" } ; 



servlet for the JSP using the -cjsp:lnciude (■> standard action 

out .write i"<htiiil><body>\r"J ; ^ . f The tfeaderjif %k k 

ynerat£d <e*M l^d, r& kmd of 

org , apache, jasper, runtime . JspRuntxmeLibrary , include (requea t , response , 

"fl&atter-jjjp", out, false) ; 

out .write ("\r<:br>\r\ESr<:eji»We can help . </em> tbr><br>\rVrCcntact us at: ") ; 
out .write ( ( java. lang .String) o ig. apache . jaspor . runtime. PageContextltnpl . 

proprietor ^Evaluate ("5 ^ initParam .mainEmail 1 java .lang. String. class, 

[ Patje ConteJtt ) _ ) spji J>&qG_Ccn Lelt t , nu 1 1 , fa lse ) ) t 

Dut.write("\r\r\r</bDdv></htmI>"» f 
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include: directive vs. standard action 



The include directive happens at translation time 
<jsp:includc> happens at runtime 

Willi [lie in i: I uric directive, there is NO rfi Unmet' hclwc-eii yon opening your 
J SI 3 page and pasting in the content) of "Hcader.jsp". In other words, it really is 
just lis though you duplicated the code front the header file into your other JSR 
Except the Container does it at translation tune lor ypttj DO dial you riorTi have 
to duplicate the code everywhere Vbu can mitt all your pages with an include 
dinviivc. and tin* Container go through the trouble of copying [Ik- headei 
i f>de into each JSP before translating «md compiling the generated sen-let. 

Bui <jip:ificliid£V is a completely diffrrrut story Rather than copying In the 
source rode from "Headerjsp", (he include standard action insert h the mponxf 
ol' "Hcader.jsp". at runt im-r. The key lo <jsp;inehtde> is lhal the Container is 
creating ;i RequestlHspatcher froio tlte page attribute and applying the included 

IIU dim I III' dli|i,lh ll< i i III' hl'h'd |"iP , Vi Ul"i . I .J . 1 1 1 - 1 dll -.11 lif :> ■ 1 1 1 • M .ills I 

response objects, within the tame thread. 



5a Why Wouldn't you ai ways use 
< j Jp: include > ? Thu t way you ta n g u a ra ri- 
te e you'll always, have the latest content. 

A: 

r\. Think about it, There's an extra per- 
formance hit with every <jsp:inc|ude>. With 
the direct ive, on the other hand, the hit hap- 
pen s on ly q hce —when t he 1 ncluding page ii 
translated. So if you're pretty sure that once 
you go to prod u r t i on the included file won't 
change, the directive might be the way to 
go. Of course there's still the tradeoff that 
the generated servlet class is a little larger 
when you use the directive. 



o 

V- I tried this with Tomcat — I made a 
static HTML hie, and included it with the 
directive. Then I changed the HTML file, 
without redeploying or anything, and the 
output from th» JS-P F »fW?t{"=f 4 pffs r- 
encei Sd if that's the case, then why ever 
use <j!p! include >? 

A\*^.-*Mr~ 

(like Turned! $]. Yes, mo5.t t?f the newer Con- 
tainers have a way of detecting when the 
included files have changed, and they do 
reti mslatctlie including trie and :vcry 
thing's great. The problem is that this is NOT 
GUARANTEED BVTHE SPEC! So if you write 
your code to depend on it, your app won't 
necessarily he portable to other Containers. 
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The include directive at first request 

WiiJi the Bwittcte JiWtfd'w, the C&tt»tfl» tm a lut l( f writ m elu, hut u»I\ on 
th* fir si request Frmn ihr Kccond request r«k tin-re's m> extn lime overhead. 



scriptless JSPs 



request Contact, jsp 









r 


1 mi - ! 
[ browur 1 







Chent 




Container 



Header j>p 



The client makes a request for 
Contact jsp, which has not been 
iranslaled. The Coniamer reads 
Die Contact. |sp page to start the 
translation process. 




Container 



translate into 



CentaetJsp.javH 



Hea.der.jjp 



The container sees the include 
directive, and combines the 
source code of Header jsp and 
Contact.jsp, and creates/translates 
that into a Java source file for the 
generated servlet 



LI 

Container 



Compile into 



la.iJL D 

iii.-i.:.! 

I-I 101 ■ 1 

\ mi |r< 



&5rttaet_Jip.jai/a 



Centaet_jsp .ciass 



Contoct.jsp 



Header, jxp 



The Container compiles the 
translated source Tile into a servlet 
class. It's just like any other servlet 
at tti is point, and Itie prevtous step 
never has to happen again unless 
Contact.jsp changes (or if your 
Container is smart and can tell 
that the included rteacfef.jsp has 




Contaetjsp 



Hcodcr-.jsp 



To complete Hie request, the 
Container loads the newly- 
comprled class, initializes a servlet 
(instantiates the servlet tiien calls 
mitO on (he new object), allocates 
a thread for the request, and 
calls Ihe jspServiceQ method 
From the second request on. trie 
Container does onty step (C): 
allocates a thread and calls the 
JspServiceO method. 
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<jsp:include /> standard action 



The <jsp:mclude> standard action at first request 

WiiJi the include standard action, &Wt>?t tea WWk al iran-ihitinjn lime, ftnd 
more work with each reque*t, especially if ilu- included Mr is jiJSE 



request Contact, jsp 













r 


ETT C^ 









Chfcnl 




Cento ct.jsp 



The client makes a request for Contact, 
jsp which has not been translated The 
Container reads the Contact.jsp page 10 
start the translation process. 



Container 




translate into 

_ m — ■ 



eg- 




Container 



Header.jjp 



The coniainersees the include standard 
action and uses (hat to insert a method 
call m the generated servlet code 
that— at runtime— will dynamically 
combine the response from Header 
jsp into the response from Contact, 
jsp. The Container generates servlets 
Tor both JSP files (This is not dictated 
by the spec, so we're showing only an 
example of how it (mid work.) 




. .1 ■ . I 



TheOguhiirv-i i::vifiilt:s i\v. iMm^n^l 
source file into a servlet class. If s 
just like any other servlet at this point. 
The generated servlet class file is 
loaded into the Container's JVM and is 
initialed Next, the Container a lie cales 
a thread for the request and calls the 
JSP's jspServiceO method. 



Hwderjipjowi Header Jap-duM 




The Contact servtet hits fie method 
that does she dynamic include, and 
something vendor-specific happens 1 
All we care about is thai the response 
generated by the Header servtet is 
combined wrth the response from the 
Contact servlet (at the appropnate 
place). (NOT SHOWN: at some point the 
Header jsp is itanslated and compiled 
then the generated servlet class is 
loaded rind initialized) 
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Memonie ft* L«* * g *" **** 

jnecharrisms. . what's different? 

<%g include "Header. :sp" r *> 

Js ting, the Container cares only about i f 
SntSSSS — p«- » » ««* 



Vr*, Can the inducted JSP have its own dynamic 
content? In yt-ur examples, the Hejder.yjp might as well 
hav# been a static Header-ntm/ page. 

A: 

J T1 It's s JbP. so ye& it can be dynamic (but you're right — 
in our example we could have made the header a italic 
HTML page and it would have worked in exactly the same 
way). Thf re are a few iinit.nl lortb, though; an included page 
CAN MOT change 1 tie response statu s code or set headers 
(which means it can't call, lay, addCookic-iO). You won't get 
an error if the included JSP tries to do things it can't—you 
iusi won't qet what you asked for, 

0 : 

But i f the included thing is dyn am it , and yo u're 
using the static include directive, does that mean that the 
d ynam ic *tuff i s evaluated onJ y e nee* 

A: 

JTjV Let 's 5 ay you i nc I ude a JS P that has a n E L expression 
t h at ca I Is the roSHt tun ction that ge nerate s a rando m n u m ber, 
Remember, with the include directive, that EL expression 
is simply copied into the includlNG JSP. So each time that 
page is accessed, the EL expression r tins and a new random 
number is gen-erated, Burn this in: with the include directive, 
the source of the included thing becomes PART of the page 
with the include directive. 



The include directive is 
P*si*ir>n-ser. 8 itiv«! 

^S>T [Vrf ^ postal* 
for example, you can put it anywhere ft, the 
page, although by convention most people out 
page directives at the top. 

But trie include dnective telts the Container 

^ ERE to ™ ett thB s ™ from the 
£11? t' ***** including 

<htn-)t><tx>cty> 

<°m include ffle^ 'Head er .htmr%> 

<em>We cm hBtp_</em> <brxbn> 
Contact us * WMParam.mainEmait} *br> 
<%m mclutta fIle*'T D oterjhtml»%> 
<hody><Aitmt> 



1 



Si oft ^ *** ** 
£ "-b.« d , n ^v™ r*"* f,J « ij 

And, yes, tine <:jsf : m£!*»de> ■ Jr tonne 
ALSO f psnW-iensrfcive, but that's metre 
otwiw tKjh wttfa the tcdude duetto « 
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reusable components 



HELLO! Old you actually 
LOOK at the generated 
^crJet cede for the include 
directive? You've got nested 
WTML a* d BOOT fagd THrfj* 
wrong and stupid. 




Uh-oh, She's right... 



Think aboui what we did. We made a page ft* thr header, "Header, 
jsp", II wai a nkrJSP ft]] on in ovrtlj compleu- with lis ci|it iiiiiHT ;i nd 
i lots in it HTML and BODY lags, Tlnrn we iuadis the "Crinuici.jiii)" 
and it, too, had nice opening iind closing taiga. Well, didn't We say that 
fvoj thing in the included file is p^bled (virtual!)') into the page with the 
imlude.' Tltiti means a-ve rj>( hi hjj. 

The code below. Tram the generated sendet, will Ni > I wwk in all 
brewer* li wwied in ours betsuw we goi tut k\. 

out.writ- C 1 <htmlXbody> . r") r 
ou t . wr i Us ( " \ i <htal > \ r<body> \ r 



?img src=\"rmaipes/Web-Services. > 
<cbr>r<GHL><stroiiq>We know how to make SOAJ? 
Buck less. </stiong></em> <br>\r\r 
</body > \ r < /h tml> '-. i " ) : 



out .write <"\r<br>\r\iSr<"-em>We can help.</era> 

<brxbr">Sr\rContact us at; 
out. write ( (java.lang. String] org .apache. jasper .runtime. 

PageContextlmpl , proprietaryEvaluate C 1 :? [initParam. 

roa inEjflai 1 1 " , j ava . 1 anq . 3 1 ring . cl as a , 

[PageContext)_jep;c_page?_rontextj null, false)); 



mjcwricer^r^rV^/lwdyx/html^) 



^BBB^^^^^^^^^ losing. HTML and 
BODY tags wtt»» V«" , ate chunks 

Design an - «-^SS -- in ° tbey 
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scriptless JSPs 



•Don't expect 
ME tii strijl out your 
redundant opening and 
closing tags 



The way we SHOUU? have done if 




Hi i • v>v took the opening and doling i.ig* smk of the im-fiidrd fik'*. This 
f/wf'.i mean thai the included fflen i an nn lunger generate v^lifl HTML 
[m^s cm iheir own; they rwjw dtptnd on bein^ include:! in ^sitn'ihirig 
btggvK Something with <html><body> ;»nd </body></html> tags. Bui 
that's the point — ywu're designing these reusable chunks so that you can 
compose complete Layouts from sjiuiIIol" pieces, without duplh otitis* the 

code hv hand. These reusable chunks aren't siMttt to live m their own. 



The Header file ("Header.jsp") 



Contactjsp 



<img ere-" images /Web-Servi ces opg" > <bi> 

«:ejii><stL"ong>We know how to make SO?.P suck Iess.<;/strong></etrs> <br:- 



<%S include file=" Header . jsp"%> . 

<en>ii'E can help.<:/ejn> cbrxbt^ 
Contact us at; $ [initParam.malnEtiLiil | 



<%@ include file 

</body></html> 



Footer, html" %> 



1 



Noiite *e took out 
all the HTML W 
ta^ torn 
the .ndkded 



The Footer file { "Footer, htm F} 



■:a href-"index ( html home- page*/a> 



] 




We kiww how /f> wr/Ae NfM/' stick less, 

Contitel us ml. likewrcate&wicksdfyi^iut.wm 
home [Mg c (3) 



UJ,. 111. iJ., C 

stripping out the 
opening 3nd dlosinfl 
tags applies t*> BuTtt 
include mechanisms— 
<jsp;int^de> and the 
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using *jsp:painm t> 



Customizing the included content with <jsp:param> 

OK. K) you've Riot a header ijiat s supposed to appear uV same way on eSWf? page. But 
whai if you wmti to r«s»Jiiiizf pan of 1 1 n - |n'adn:' Wli.ii il you wain, say, a nnm-\[- 
sensitive suhtiile that's pen ■ »T the header. Inn iliai change* depending on iln* page? 

Von have a couple options; 

The. dumb way: pul :in .-h l 1 1 ? i l 1 1 . ■ mini nuiiim inn* flir main page, ft*, say, ihr ftral thing 
in ynurpa^i? after the include (i »r the hi-adiT- 

The smarter way: pass the subtitle informal ion as a new request parameter ta the 
iin luiltd pai^i' 1 

Why that's cool: if ihe ^xibtitic information is. supposed to he pan of the header. 
Inn il i i'-n i i..r ■ li.ui'L- ■. -lill u.iiu ill' In \ii|>-i p,u i ■ il ili' i"jnj ■ 1 . 1 1 > i' ■ ik.iki Mi' 
decision about how thai iubtitJe should apps-ai' in the final page, hi Othei word*, let the 
pcrftoti whit designed the header decide how llu- wthtitlr shimhl In- rniih-nill 

JSP that does the include 

c 

<jsp' include p age=" Header. jsp" > 

<jsp:param name="subTitle" 1 value="We take the sting out of SOAP . " /> 

-.:tni--Web Services Support Group, </em> •■br><-"br> h 3 uif 

Contact ug at! S I in Ltr'iriiri.mjinLitiailj 

</body></htmi> 



The included header that USE 3 the nvw par am ("HeaUtfMSpf") 



$ (pa rain. subTitle ) •-. t<v 



t 



1* i^ie included file -f^ 



ere V re 



Note iku idea of fdritn. 
A.,*- - 1 mdke ATty jewe with 
ike ififlkde dn-eitive f which 
is d-/rijc-i/ v io £ apptas 
Or*L/ io -the ^.^cLdo 
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This got me thinking... if I can 
include an* J$P in another, what 
If I wonted to forward from one JSP 
to another? If the client gets to my 
page mc r [isn't l-3gq;:= : : n t vitmt to 
send him to a dfferefif page... 





The <jsp:forward> standard action 

You CAN forward (roni oneJSP u> another. Or from one 
JSP tit ;i s< rvlct. Or Irum wit- JSP in any Other rrsoiin/r in 
yrmr WCh ;»pp. 

< H course* you don't usually tsaM lit tin Jus iti production. 

fcn-riHirsr il' youYc iisiuj^ MVC, lite View is suppn&ed Ili lit 
ilir View! Ami the View has mi business doing control 
|og|t. Iii <itlicT wrirds n shouldn't In- dir \ ii:w*a ji»l> to 
figure oui if the guy il togged in or nnl — someone rt.w 
slimild have made thai decision (ihc Controllt i . I ■ V-\<- 
dividing bo forward IO the View. 

IS H' lil - -■!;■■; n :;• I ,i I ill i! .• ! M\l Muk'ilHili: ii I 1 1 1 1 

lime IjeitiR, and see how we fou/t/do it, il' we Win to forward 

.';>■;« SI 1 page in some thing ehie. 

Why bother il you'll nt-ver do it' Well, you might one ik<> 
xctiDtlj-N' on li problem where <j*p;:fbTW8ird> ii ;> us liil 
solution. More tmportaraiy; like it toi <>l" what's in th 

tu^Ji I-,,ljI ll,il AUK^,^ lJ._i Ih.ia ,iT **~£j%W* -f,i^H i"L T . ■ Ji n»n 

LHBJWJY 1,1 ||1 | 1 | J I I \.*| || ■, K||l I ll| I. !■ I| Ih |i| IE-" ■ -f ljp#f 

Lttrlcing in ga /.ill ions of JSP** thai you mighi one day find 
yourself maintaining (or ideally ivfnctnriiis;. 
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using <7sp.'forward f> 



A coHdrtional forward.,, 

Su inwpw ymft* a,|SP and you <w*ame ywfre being called from a request 
iluii inflmlfs ;> tf.s^;\«mr-p;iratiicit-r. Since youV counting on that parameter, 
yim wanl to llrs i check thai <h<- Km.\/tmr parameter i*i»"r mil!. IT it's not, no 
problem finish the response Btil if the ttSttSftmt pitrainrier fj null, y< m wanl 
to stop right here and I urn the whole request over to something fUe- — like a 
dil'lereui Jttl. J that will ask lor the atajsMHBfc 

For turn 1 , we know we can do It with scripting: 



JSP with a conditional forward ( Hello Jsp) 



<Jitml><nody> 
Welcome to tmir page! 



<4 If {request. getParameter ("userName") = null) \ It) 
<jsp: forward page= " Handle I t.jsp" /> 



Hello $ iparam.userNamet 
</bodyx/html> 




|{ « *ade it ta» Car, tin <.«rNa«* 

Mlt h a ,e been ^ WOTHIW k 
th.i pay will appear in the ven>*ae 
■the request ii forwarded 



JSP to which the request is forwarded (Handlelt.jsp) 

<html><bady> 

We're sorry.-, you need to log. in again. 

Th-s * a f^' n «M ? a i e ttot 5^ 
<Xgi3» a..rion="Hello.5sp" Biethod="get"> thf rfQljfS (. parameter mfvl the 

Name; <input nan»-"us<srNanie" typ«-"text"> ^ rt - tte( b iHe JSP we were 

< input name= w Subj»it" t , /pe="fiulHiiit" f > , a n ■ „ 

</fotm> 

</bodyx/html^ 
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How it runs.. 



'Vhr fmt tim* ytpii r&jtti&l the- Heitajsp, iIk-JS)' dees ilir 
i ondititmal irsi. dist-HUvrs iIhtc's nri valur foe usttrNanir, 
and forwards to the Hafidkft-jsp. Assumiflg ifae user type* m 
name £nw the name inpui lidd, die .wrW request won'l do 
the forward, since the uscrNanic request parameter has a 
non-null value. 



First request for Hellojsp 



« on 



fl O + h11 P "locaUiasl-SOaBlests/HellD j 




We'ic sorry.. .you need lii log m again. 
NaqttS | Johannes f Subimt > 



Second request for Hello.jsp 




JflJ & htt p -tflocalnost:BOBDrtasts/Hallo.)sp 



Welcome to oin page! 
Hello Joh amies 




How come the "Welcome to our page!" 
text didn't print out trie first time? 
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<jsp: forward /> standard action 



With <jsp:forwarti>, the buffer is 
cleared PEFORE the forward 

When li forward hripprus, the- resource to which ihc rcqucsu is 
forwarded .<Lirt!> with li defer response builer! In other winds, 

anything wilted to ih? revppntc before the forward happens 
is thmwn Out 

VA, This make* sense if the page if buffered— because what you 

vj rite is sent t o the bu ff e r, a n d the Co ntai n er j ust c lean the buffe r. 
But what if you commit the response BEFORE you do the forward? 
Like, what happens if you write something and then call fluthi) on 
the out object? 

A; 

OK. we k it o-'- yci.1 re just Asking this out of intellectual curiosity 
since it would be a phenomenally stupid! and pointless thing to do. But 
you know t?kit. 

But you disc know that weird things can still been the exam, since 
your too- l-azy-to-iearn-it co-worker might just put something this crazy 
into his code, in which case you better get used to it. 

You can prcjbably think through the answer, though. If you Write soriif- 
thing like: 

< tit mix body ■ 
Welcome to our page! 
<% out .flush () : %> 

<» if {request ^etParaiseterr'-JserName"} — null! { 
ti> 

<jsps forward page-^Handlelt .jap" j> <\ ) I* 
Hello 5(paraai.userWajtie| 
< /bod y></ html > 

The Container dutifully r.ormniri (send*) "Wef-come to our page?' as the 
response and then the Container sees the forward. Uh-oh. Too lote. 
And an MlegalStateExreption happens. 

Except nobody wl 1 1 see the exception! The c I ien t just sees " Wile .om s to 
our page!"... and nothing else- The forward throws an exception but it's 
t oo late for t he Con t airier to ta ke bar k the response, jo t h e e I tent w?e* 
what was flushed, and that's it. The forward doesn't happen, the rest of 
the current page doesn't happen. End of story for that page. So never 
do e flush an d- forward! 



NOTHING you wiife before 
iJie forward will appear if trie 
forward happens. 
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She doesn't know about JSTi tags 

When you need more lIirKtiuniility, aoraethinffbeyood whm yon 
can gel whh Hie standard anion* or Kl.. y«u ddn'l have tn resort 
ttt icftpting. Iii the Rex I chapter, you'll W-.m\ htm to u*c the JSP 
Standard Tag Library I.I (j&TL I- 1 1 i" do juvi (tboQl everything 
vnu'll ever need, using n combination of tags and EL. Here's :i 
MiL-.ik. |jcL-k of liuw iu du tm luuLliiiuiuil forward wtiiwU tttptmg. 

taqiib prefix 1 -"!;" uri-"hfctp: tl\ ava .suni com/ iso/nst l/core J 
'■htiril>*-'body> _, 
Welcome to dui page! V 



<c:iF test-"${ empty param, usErKarae) " > 

<jsp: forward page="HandleI t . jsp" /> 
</c:i£> 



the tay fc» 



Hello ?{ param. userNameJ 
</body></html> 



By tl* «y... yow ^hjblv be able r*,. 
apf- We'll do but i. He „«fc tltfrfe* 
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bean standard actions 



Pean-related standard action review 



BULLET POINTS 




■ 



■ 



* i - sp useBean> standai j action ieflnes a yanab e lhal holds a 'eference to e thei an 
existing bean attribute or. if Ihe bean doesn t already exist, a new bean. 

The <jsp:useBean> MUST have an "id' attribute which declares the variable name that'll be 
used in this JSP to refer to the bean. 

K you don't include a "scope' attribute with <jsp useBean> the scope defaults to page scope. 

The 'class" attribute is optional, and it declares the class type that will be used if a new bean 
is created. The type must be public, non-abstract, and have a public no-arg constructor. 

If you put a *rype" attribute in <jsp:useBean>, it must be a type to which the bean can be 
cast 

11 you have a "type" attribute but do NOT nave a class attribute, the bean must already 
exist, since you haven! specified the class type that should he instantiated for the new beam. 

The <j5p:useBean> tag can have a body, and anything in the body runs ONLY if a new bean 
is created as a result of <]sp:useBean> (which means mat no bean wilh Uial'id" was found tn 
the specified (or default) scope}. 

The main purpose of the body of <jsp- use Bean =■ is to set the new bean s props lies j&ing 

<jsp:serPraperty>. 

<jsp:se)Property^ must have a name attribute (which wli maters the 'id" from <|sp.useEean>) 
and a "properly" attribute. The "property' attnbute must be either an actual property name or 



if you don't include a "value J attnbute. Hie Container will set the property value only if Ihere's 
a request parameter witn a name tnat matches the property name, iryou use me wildcard 
( ') tor the "property" afiribute : ihe Container wilf set the value of all properties that have a 
matching request parameter name. ( Other pnapertiea won! be affected } 

If ihe requesi parameter name is different from the property name but you want to set Ihe 
value of the property equal to ihe requesi parameter value, you can use the "param" attnbute 
in the <jsp.setProperty> tan 

The <jsp:setProperty> action uses introspect to match she property to a JavaBean setter 
method. If Ihe property is "*", then the JSP will iterate over all request parameters to set the 
JavaBean properties 



Property values can be Stiings or primitives 
do the conversions automatically 
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The include review 



BULLET POINTS 



■ You can build a page wi!h reusable components 
using one of two include mechanisms— the 
include directive or (he <jsp.incliide> standard 
action. 

■ The include <flrecr/ue does ihe include a: transla- 
tion time, only once. So the include ditetf/Ve 

is considered the appropnate mechanism for 
including content thai isn't likely to change aftef 
deployment. 

■ Trie include directive essentially copies everything 
from within the included We and pastes it into the 
page with ihe include. The Container combines all 
the redded files and compiles |us1 one file 1c Ihe 
generated servtel. A! runtene, Ihe page with Ihe 
include runs exactly as though you had typed all 
the source jnto one file yourself 

■ The <jsp:include> standard action includes Ihe 
response of the included page into the original 
page at runtime. So the include standard action 
is consrdered appropriate for including content 
thai may be updated after deployment while me 
include directive is not. 

■ Either mechanism can include dynamic elements 
(JGPcode wish □.expressions, for example) as 

well as sialic HTML pages 

■ The include directive is Ihe only position-sensitive 
directive the included content is inserted mlo Ihe 
page at the exact location of Ihe directive. 

■ The attributes for the include directive and 
the include standard action are inconsistently 
named— the directive uses 'file" as the attnbule 
while the standard action uses a 'page" attribute. 

■ In your reusable components , be sure to slrip 
oul Ihe opening and closing tags. Otherwise, the 
generated output will have nested opening and 



dosing tags, which not ail browsers can handle. 
Design and construct your reusable pieces know- 
ing that they II be included/inserted into something 



You can customize an included file by setting (or 
replacing) a request parameter using the 
<jsp:param > standard action inside the body of a 
<jsp:include> 

Wa didn't show it in this chapter, but Ihe 
<jsp:param> i 




■ he ONI Y places where a cjsp param> makes 
sense are wilhin a <jsp: include* or a 
<jspforward> standard action. 

■ If Ihe param name used in <jsp param> al ready 
has a value as a request paiarrerer fie new 
value will overwrite the previous one. Otherwise, a 
new request parameter is added to the request. 

■ The incfuded resource has some limitations: it 
cannot change the response status code or set 
headers 

■ The <|Sp. forward > standard action forwards the 
request (just like using a nequeatDispatcher) to 
another resource from the same web app 

■ When a forward happens, the response buffer is 
e : e;red lirst 1 The resource to which the request 
was forwarded gels to start with a clean output. 
So anything written to Hie response before the 
forward will be thrown away 

■ If you commst the response before the forward 
(by calling DuLflushf). for example), the client will 
be senl whatever was flushed, but [hat's it The 
forward won t happen, and Ihe resi of the original 
page won't be processed 
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exemse answers 



, BE the Container 
s\ ANSWERS 




Look at this standard action: 



r 



<j3p:useBean id= w pex3on' r type="foo. Employee^ s cope =" request" > 

<jap:aetFropei:l:y riaj[i&="per3on H proper ty=" name * value="Fred" /> 
</ jsp:useBean > 



3 ws f*"" * 



abstvait 



3 



Person 



Siring gelNamt". ' 



Employee 

irri gelEmpCO 
void Eel£mplD(rrt.l 



What happens if the servlet code looks [ike. 

f oo . Person p = tieW f 00 . Employee ( ) ; 

p.setNimfi("Evan rr ) ; 

request . setAt tribute < "-person" , pK r 



fails at *M ™ e V"**" *^ ribu ^ 14 iW £ r T 4t 

« the < jl? wBean > ta«> w*/t *** -t J 
thm Ml 



„,r.<r that « y* a tyf« 

be a* atth^tf ^ that *a«e and tfaf* 



What happens if the servfet code looks like: 

£00, Per sun p = tieW ioo . Per a on ( } r 
p.aetHaneCEvaii") ; 

request . se tAttr d-biite ( "person" , pi t 
-J* th« ier^Jct fails to io^lt sk,U„i , i in 



fatality 



Both dawes ane • 
the ewkay "f»" 
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3 



< ihrn an HTft 1 1 , l< h iil tliat uws diectbcfe* lu allow a user to sefeel 
[ niiiLupL" uilura lor a pttraiisttjer calfi 1 1 hobbies. 

Which EL txpressicitu tvsXmib in \\w Brsu vulur of ihtr hobbies 
parumeUT? (CboO«! 00 thai apply.) 

□ A. ${param. hobbies) 

□ It. ${parainValue. hobbies* 

□ C. $ { par amVa iue 5 , hobbi e s [ 0 ] J 

□ 1) ${paramValues .hohbies [1] } 

□ E, ${ par antValnes [hobbies J [Q] } 
U [■' % { par amValuG s {hobbies] [ 1 ] ) 



Givi-ti thai ;i \\rU applicmirm More* tin- wrljninsl*r rnuiil address in (he 
servln ronlt'si ioitiiiizatfotj psanmstm called master -email. 

Which retrkrves that value? (Choose all that apply.) 

□ A. <a hrcf='mailtor4UnitParain J niaster-eiiiailt'> 

email me</a> 

□ R. <a href='mailtc:${contjextParam.master-email}'> 

email me</a> 

U t: <a href = 'mail to :${init Par am[ 'mas tor-email' J }'> 
«na i 1 H<5< / i> 

□ is. <a href=' mail to : $ { eontextParam [ 1 master-enia.il' I } ' > 

email me</a> 
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mock exams 



Given iht following Java class: 

1 . package com . mycoinpany ; 

2 . put>l±a class MyFunct ione { 

3. public static String hello (String name} { 

4. return '"Hello "H-name; 

5- } 
6. 1 

I Lis class represents (he handler for a fcnctiofi th*l fa pari r>r a iag library 
<*@ taglib uri=-''http: //ray company, com. tags" prefix=' 1 corap' , %> 

Which "lag Library Deisripitn* entry defines ibis custom Qmctioi] w ib;it it c&n 
be used in an EL expridssbti? 

□ A, <taglib> 

<tag> 

<namcs >He 1 lo</ tiamo 

< tag-c las s>cora . mycomp any . MyFunc tions< / tag- c las s> 
<iody -conten t> JS E< /bo4y - con ten t> 
</tag> 
</taglib> 

□ U. <taglib> 

■ * ■ 

<function> 

<name >Hel IcK / name> 

<f unction- c 1 as s>com . my company . MyFunc tions< / func tion- das s> 
<£ unction- s ign a ture> j a va , 1 ang . 5 tring hel lc ( j a va . lang . string ) 
</ f uncti on - s ignature> 
</function> 
</taglib> 

□ a <web-app> 

<sorvlet> 

<s ervle t - c las s >ccm . mycompany . MyFunc tions </ servlet- cl as s> 
</servlet> 
</web-app> 

□ 1). <taglib> 

<function> 

<name>Hel lo</n ame> 

<f unction- c las s>cewi . mycompany . MyFunc tions< / fun etion - clas s> 
<f unction- s ign a ture>he 1 1 o ( j ava . lang , str i ng) </ f unction-signature> 
</£unction> 
</taglib> 
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1. package com .example ; 

2. public class TheBean { 

3. private int value; 

A. public TheBean ( ) ( value = 42; } 

5. public int getValue ( ) ( return value; ) 

6. public void setValue (int v) { value ■ v; } 

1- } 

Assuming rui insiaiitt n of TheBean h.ui- bcm created >xt, whichJoP 
standard aclinn statement:* create a new instance of this bean and 
slurp ii in the request sLupe? (Choose liII thai apply.) 

Q A. < j sp : uae Be an narae^ " myBe an " 

type«"com. example. TheBean" /> 

CI V>- <jsp LiaaTceBean name = JJ ittyBean" 

type- "com. example . TheBean" /> 

□ C, <jsp:useBean id-"myBean" 

class = "coin . example . TheBean" 
scope=" request" /> 

□ ]>. < j sp : raah eBe a n id- "myBe an " 

el as s=" com . example . TheBean" 
s cope=" request" /> 



Given a Model I architecture in which a JSP page handles all nf die ruiitrollt'j 
function** iIi.k JSP contfollei tieedi tn dispatch the rcquesi io another jsr \r,^f. 

\\'hu li >umdtud action code will perform thin dispute h. J 

^ A <jsp: forward page-" view, jsp" /> 

□ H <jsp; forward flle="view . Jsp" /> 

□ C, <jsp: dispatch page="view . jsp" /> 

□ [). < jsp dispatch aie-"view, jsp'' /> 
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( '• km: 

11. <% java.u til .List list = new java.ufcil. Array List (} ; 

12. list, add ( "a"} ; 

13. list add ("2") ; 

14. list. add ("c'> ; 

15. request. se tAt tribute ("list" , list); 

16. request. setAttribute ("lis tldx" , "1"J ; 

17. %> 

18 . <% — insert code here — %> 

Which, inserted at line 111, gig saUil wad ev*duaTe to c ? (Chooife all thai apply.) 

□ A ${list.2) 

□ B. ${list[2]} 

□ C. SUiat,listIdx+lJ 

□ D. 3{liatEliatIdx+l]> 

Q \ |(li 3 t['listldx r + 11} 

□ F $ (list [list [lis tldx] 3 t 



7Whw h slatenaeoia ahem the . (dot) and [] flL operators are true? 
{C&OOK lba< ;i|'.i|tlv.) 

□ A. $[foo.barJ is rcjiiiv.ilml In S(foo[bar]} 

□ H. Sffoo.bax} is rqiiKvdt-rrt to ${£oo[ "bar" J } 

Q C, ^twI"S"]| isvulicisyHiitsir foo is a M^p 

Q li. $ (Header- user -Agent} iwa^jkaJetttra 
$ [header [user -Agent] } 

□ I: . $ j heade r , User - Agent } a eqs itvaknl h i 

$ [header ["User- Agent" ] 3 

□ I S{£oa[SJ} Ls vjlidsynLasif foo is ;t List i cjii array 
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Gfrea a JSP" page with The- ihv.-. 

${101 % 10} 

What will be displayed? 

□ A. 1 

□ a. 10 

□ G 1001 

□ 1) 101 % 10 

□ fv |101 % 10) 



10. ${pai;ain.firatnavie} 

11. ${param.middlenarne) 

12. $ jparam. lastname] 

13. $fpa:ramValues.lastnameIGJ } 

Which describe* the output produced by (his portion of a JSP page when parsed thi' 
■ 1 1 a i ■ ■ t, ^[icj. ?firstnamG=John£lastnamfi=Doo ' 

G A. John Doe 

LI H. John Doe Doe 

Li ! ! John null Doe 

Ll I.J, John null Doe Doe 

□ A null paiiuu] exception wil] he thrown. 



Which show fa I id usa^e of EL implicit variables? (Choose all thai apply.) 

LJ X. $ (cookies . too] 

□ S!. $ UmtFaram. too] 
G C $ ipageCon text. fool 
Li D, $ ( r eques tS cope . f oo } 

□ K . $ { header [ " User -Agen t"J 1 
Ll P. $ { reqiio s tD ispatcher . f oo } 

□ ti. ${pageContext. request, request^} 
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WluHi are tnif about die <jsp:umsBean> ttanidftrd actbiu? 
(Clu»i«f jiII thul apply, 

Q A- Tin- icl II hi ii- i" u|jii<m.il. 

□ ft. Thr scope anrihuu- in rH[iim:il 

G (.'. 'Hi!' scope attribute is optional and dtlVmlth in request. 

□ 11 Either ilu- class 01 type attribute* may be spet ified, 

llllt ill [<\lftl oils-. 

LI i'l. It is valid tti include both the class attribute and ilu type 
attribute, evrrx If thdi i'h II i t ^ are N r UT ilu- same. 



How would jrtiu include dynamic cumnu In a JSP, similur tos 
12 ^'rver-sidc include (SSI)'; 1 (Choose all that apply.) 

□ A. <%@ include flle=" / segments/footer . jspf" &> 

□ II, -Cjsp : forward page=" / segments/f ooter . j spf " /> 

□ C. <jsp: include page-" /segments/ footer . j spf " /> 

G I), RequestDispatchex dispatcher 

- request .getRequestDlSpatchet f "/segments/footer . 3 spf " ) : 
dispatcher .include ( request , response ) ; 



^ In as HTML page With a fkh, gniphiral layuui, which JSP iLmdard aiiion can 
I J l:c Used trt import tin image lilt' intu the JSP pu^r; 1 

□ A. <iap ■ image paqo=-" loqo . pnq" /> 



U IS. <;]sp : image tlle=' logo .png /> 

□ C: <jsp: include page^" logo . prig" /> 

□ U. <jsp; include £ile= " logo , pug" /> 

□ Iv This CANNOT he tfcme uei&g aJSP Btan4wd SHrtibtt 
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1. package com. example ; 

2. public class MyFunctions ( 

3. public static String repeat (int x, string str) ( 

4. // method body 

5. i 

6. ! 

mid giirn rlir JSP: 

1. <1@ taglib uri='7WEB-IHF/myf uncts" pre£ix="my" S> 

2. <%-- insert code here --%> 

Which, insfcrtcd Hoe 2 in ** JSR is r valid EL li»icttt>i) Bovdcattoi? 

□ A ${ repeat (2, "420 »>] 

□ B. $ I repeat P2", "420")} 

□ C!. $ (my : repeat (2, "420")] 

□ H $ (my : repeat ("2", "420")} 

□ E. A valid invocailun CANNOT he determined. 



Given: 

10. public class- MyBean { 

11. private java .util .Map params; 

12. private java . util . List objects; 

13. private String name ; 

14. public java .util .Map getParams ( ) { return params; } 
LB. public String getHaiaeU ( return name; ) 

16, public Java. util. List getObjects() I return objects; ) 

17, i 

Wliifli will i iuiM 1 ititot* (assume lliai attribute iiunu-d mybean can htr fount I. ,lihI 
is uf type My Bean .' Clioest' all thill apply.) 

□ A. $ {mybean.namel 

□ I! $ (my bean [ "name" ] } 

□ C, $ fray bean. objects. a} 

□ I), ${mybean ["params"] , a} 

□ I- Slraybean. params ["a"] } 
U T &{raybean ["objects"] .a} 
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Given a JSP page: 

1. The user has sufficiently logged in or out: 
2 . $ {par am . loggedln or par an . ioggeeltrut \ . 

If I lit- request includes the query string "loggcd0ut=true" , nlnn ^ill lx j ill Ls 

moment's displayed \ alui ? 

□ A The user has sufficiently logged in or out: false . 

□ 11. The user has sufficiently Logged in or out: true. 

□ U. The user has sufficiently logged in or out: ${param. 

loggedln or par am, loggedOut} . 

□ |i The user has sufficiently Logged in or out: param. 

loggedln or par am. loggedjOut . 

□ K, The user has sufficiently logged in or out: or true. 



r Which sham EL access operators are true? (Choose all thin apply; 

1/ 

LI A. Anyivhcre the . (Hrji- operator b lined, flu- [] could be used 
instead. 

□ & AnywoBf* the [T operate w u*^, dip. [dot ^could be med 

G C. If the . idi>H qpetatar is used to acets a bean property bin the 
piuperiy doesn't exist then ik runtime exception Li thrown. 

Q IX There- are smmi- titttfltiotu when- the. tdotJoppl'StOt Httl*1 he 

used and nther situations when- the [] operator must he used, 



The following code fragment ;ippea]s in uJSP page: 
< jsp : include page='/ j spf /header . html"/> 

The JSP pagr is part ol a web application with the cond \! iw I myapp. 

Given that tin- application's top leveJ duectoi j ifi myapp, in kn ta (he patiMh to th£ 
header . html Hie? 

□ \. /header. htmX 

□ f{. /j spf /header, html 

J t: /myapp/ j spf /header . html 

□ I), /includes/ jspf /header . html 
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An online [cwdry retailer wishes to Luslomiw llirir inline £#ta]Qg for users who 
nre togged in. They warn to show speriab Tor the UjtOp'S WrtliiilnTie- mouth. The 
company's special offers arc stored as n Map< String, Special [ ]> identified as 
specials in application Scope and updated daily. 

There is a bean stored as a se&siun-scoped attribute named userlnfo. Culling 
getBir thdate () . getMonthO ali 'I 1 ' 3 bn_ j £in will return the uisth birthatone 

Hill. 

Which of ihe fefl«M«ng rode snippe ts L OLiJd correctly retrieve the appropriate npe-t aal 

Q A . S { appl ica t ions cape [user Info. b ir thda t e .month .specials] ) 
Q IV S< app licationS cope. specials [user Info. bit thdate . month 3} 

5 (app ligations cope [ " specials ■' ] . userlnfo .bit thdate .month ] 
□ D. $ (applications cope[ "userlnfo .bar thdate .month"] .specials] 



A web based application lor a major online movie rental retailer stoic- ,i 
List<Movia> as a session attribute to rontaiil movies the u*er has requested, 
A random, emhedded movie trailer from this. I'm must display on the user*' 
main page CVcrj ttOie fllfi users' main pa^r is viewed, 

Management think* a similar feature will be needed in the near inline on 
other page* that ditplaj fi*Wof movfefe Stftatnhtg ^ n I • ? is accomplished with 
regttlar HTML, just like adding images to a page but with more complex lags. 

The development team needs a solution thai tt both flexible and maintainable. 
One possible Solution is to create an EL function. The following statements 
art f from a team meeting concerning EL functions as a solution to Lhis 
problem. Which statements are true? i, Choose all that apply.: 

Q A. EL fund ions can no) solve this ptttbkjn because they cats noi retrieve 
•u-wiiem attributes, 

□ It. The method implementing the EL ['unction should no) be dcr ■ tared 

S bit it to (jive it M-f:rm to SOitiiiijii SLOpc. 

G (i The EL IsmcrJon can accept a parameter of java .util .List 
whit h will allow the needed movie lisl to be passed to it Using LL. 

□ I), You might have lo write HTML taps in the middle of jaws code using 

an EL fraction, which Lb more dillu-uU to maintain. 



you aro bore t 429 



mock answers 



3 



Given an HTA II, li uiu lhat use* diexkbottes to allow a user tn select 
I multiple vahtej tin a paramett'r cailt.tl hobbies. 

Which Hj. tipresiitais rv;iliinic Uj llir first tulur of the hobbies 
puramclcr? (Choose nil thai apply.' 

Ef A. Siparam. hobbies J ^ & ^ Utiu5C W 

□ B, f{ par amValue. hobbies) i s „o ^*riwVJ-e" P»flit>t variable 
fif C. $ {paramValue a. hobbies [f>] } 

□ 0 $ {paramValues , hobbies [ 1 ] } -flfben P b ind^eti arrays 

□ K- ${ par amValues [hobbies] [0] } 

□ K. ${paramValues {hobbies] [1] } Ml F ba*, 

Given thai a web application srtorei 'In* wtbmarter i-nuiil address in th* ^ 23 An{ j 

Z servlfcl contest initialization pawnnetcr .called roaster- email. 

Which i t'irioves that value? (Choose all that apply.) Vbrjet 

□ A <a hrafs'mailto^iinitPaiam.master-enail)^ ^jXi'^X? ^ ^ 

email me</a> 

□ R. <a href='mailto : $ (context Par am. master-email} ' > -Op Lion B< "there it no 

email me</a> £cnbs*tf»*i«. kiftot «*i*bl« 

Of (r. <a href='mailto;${initParam[ 'master-email' J 1 ' > 

□ I). <a hre£= J mailto : $ ( contextParam [ 'master-email'] } ' > -Opto* P t there u no 

email nte</a> £™iei4ParA.* i*p|i£it variable 
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(Hive n llif 1'ollowingjav.a class: (JSP v2-0 sett'*" 2~^^ 

1 . package cola , rayconpany ; 

2. public class MyFunctions \ 

3. public static String hello (String name} { 

4. return "Hello "+name; 

5. ) 
S. } 

Thin datsS represents handler for a I'mK'tioii thai 5m pari nf a tajj; library. 
<*@ taglib uri="http : / /my company . com. tags'- 1 preQx="corap' r %> 
Wliidi "Irtjf Library Dt-ttTTplnr entry definr* (his ruslnm film lion mi thai i< i :ui 

be u'ird in mi EL expresttion? 

□ A <taglib> 

m w ■ 

<tag> 

<namc>Hello</ nama> 

< tag- clas s>coni . my comp any . MyFunc tions< / 1 ag-clas s> 
<bc-dy -content>JS P< /body- conten t> 
</tag> 
</taglib> 

5^ It <taglib> 

<function> 

<name>Hello</n.ame> 

<f unction- clas s>com my company . MyFunctions< / £unc tion -cla«ss> 
<f unction- sign a ture> j ava, lang. string hel lo ( j a va . 1 ang . s tr ing ) 
</ f unct i o n - s ignatur e> 
■;/functL&n> 
</taglib> 

□ t: <web-app> 

<servlet> 

<servlc t - n amo>he:I io< / servie t-namc > 

<servle t-class>eam. my company . My Fun c ti ons </ servlet-cl as s> 
</servlet> 



□ & <taglib> 

<f unct,on> *9*fa»t it 

<name>Hello</name> J 

<£unction-class>eom.mycoiispany .MyFunctions</function-class> 
<f unction- s igna ture>h« 1 1 o { j ava . 1 ang , String) </ function- si gna ture> 
</funetion> 
</tag!ib> 
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(liven: 

1. package com.example; 

2. public class TheBean \ 
3 . private int value ; 

4. public TheBean () ( value = 42; [ 

5. public int getV^lu&O { return value; } 

6. public void setValue (int v) { value - v: } 

7. } 

A--.iimii.is>: ii" instances of TheBean htwt been created yet, which JSP 
standard action statements create a new instance of this bran and 

More it in the request scope? (Choott all thai applv. i , 

U A. <]sp:useBean name -"my Be an" JS" , ^ a nSw i(Vt l fl* ^ow 

type- "com. example , TheBean" /> ^ ^ ^^d default* ?ay) 

LI ]>. < jsp LniakeBean narrLQ-'myBean'' 

type-"com, example, TheBean" /> ~0r*ti»i B U invalid ft* afl of £ke above reiswii 

□ < .;. <j S p:useBear> id>"»yBean" pU j^alceBe* is NOT a «jj b 9 

class="cQni . example , TheBean" 
s c ope =" request" /> 

□ ]). <jsp ir&akeBean id= r 'iiiyBean" 

class-" com . example , TheBean" - I™ £ 11 m ^ tci ^* , 
3 c D pe="reque 3 t" /> Jif^aktB^ is WOT a real t^ 



I pi^ i-ii a Model ] architecture in much *JSP pagr handles i>r ilii 1 controller w 
ruiKtiom, that JSP com roll ei n. . ,i> u» dispatch the tcquttt to another J$F page- 

Wliii'L -.i.i in I. hi I ,)i (ii'ii ciiili- w'iW [>i-rl'nni ihi> ■ 1 1 - 1 ■ , l i ■ Ii, 1 

\. <jsp: forward page-" view, jap" /> -Opt"* A -» t**tti Cpj i-NO) 

□ 13 <j sp ; forward file-" view , jsp" /> -Dpti*i B a LrwjJid hefiauie the 

□ i 1. <jsp : dispatch page="view , jsp" /> fo ™ Sr£l ^ n * 

□ D. <jsp: dispatch file-"view, jsp" />-0fti e « C and D a^ ™alid b«* se 

*W ii m disfdieh actio* * 
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11. <% java.util.List list = now java.util. Array List () ; 

12. list, add {"a" > ■ 

13. list.addr2 r, > : 

14. list, add Pc">; 

15. request . setAt tribute (list" r list); 

1 6 . request . setAt tribute ( "listldx" , "1" ) ; 

17. %> 

18 . <% — insert code hers — %> 

Whidij inserted at litre in, are valid and evaluate too c ? (Choose all thsu apply.) 

□ A $U±st.2} 

-J -Ovtiohi and L Src mtorredt 

^1 H. $<li s t[£]) bei*u« (U c^aW Uhwt 

□ (:. $(list.listldx+l} be W *iib * prWiW 
yll I). ${llst[listldx+l] ) 

□ I.-. $ {list t 1 listldx' + 11} -0<?htm F-'li ^Hit^USt&L 



Which staticoetmr about tfre . idtii; tincl [] EL opemm* tew? 
( 'hoote .til thou apply.) 

□ A. ${foo.bar} * njuivjiknl k> ${ foo [bar]} 5 3d b< foot" bar "J 
irf R, ${£oo,bar} ^ i-cjuEv.iJ^-rir to $ ( f oo ["bar" ] } 

!^ C. $(fuo["5"]J ]>mi Nil ^ch.in li fuo i> .i Mjp 

□ I J. 5 1 header . User- Agent} » e<juiva)ea£ tc 

${ header [user -Agent] } --ffetwins D a*d & art ™L#*tL{ beta** 



Q | r ${ header, User- Agent) k«Jtiivakni (u 
$ {header [ "User- Agent"] } 



^Options D ard t a« i*fc*rt£t p« 



I ${foo[S) } is valid syntax U £oo is li List or an army 
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Ciimi :..|SP p,, w Will. 111.- liur: <J£P W" ^ 

suoi % 10, 

Uji.u hvjIL bp displayed? 

Q v 1 -tytwrn A it dorvett Tke mcduL? 

. rt*rat* rttu^w remainder *+ a 

a H- 10 o^eraW 

□ C. 1001 

□ 1). 101 % 10 

□ 1 101 % 10} 



10 



Givfflfc (JSP v2-0 W l' fc7 

10. Slpararfl.&rstname} and ft l-"n 

11 . $ 1 param . middlenarae } 

12. 5 f pa ram. last name} 

13 . $ fparamValues . las t name [0] } 

Which describes ihe output produced by this portion of a JSP rui^e when parsed the 
query string ?firstname= John t las tname=Doe.' 

□ A John Doe A '* bft *^ e W 'J 
(U H. John Doe Doe plfcfc tht xsor'i last 3 s 

(!. John null Doe 

□ 1), John null Doe Doe -Ofhota C A*A £> jre invalid be£a^c Imr // 

□ K. A null pointer except: rill Kftl!wvw£^ ""^ ^ VT' 



Whir.h show v;,lid us;iftc Of EL implicil variables? (Choose all thai apply) {JilP vl ° W 

J A. ${ cookies.! do j ^Optisn fl is intomfrt beiawe 

3 I!. 5UnitParam. foo} variable U "tooltie". 

□ t : . $ 4pageContext . fool -Oft™* C i* i**torre*t t^U** 
a I). $ ( tequestScope . Iw} f ayCcnte** <* NOT a Map a*d 
3 E $t header [ User-Agent"] } tfl * 1 r ^ ' 

□ [■ $ ( requestDispatcher . f oo } -0f4i™ F is irCotrcti beta™ 
H a $ {pageContext . request . reques tURI 1 « NOT i» i .„ r ltft afaje it 
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WHich are urne about the <;jBp:usaBean> standard actfooi ah j ^ UfOr) 

iClu >wl - .,11 thai apply ^ u mCo ^ t£ -t 

LJ A- TF[IC j-d ■ I I I L 1 1 hill 1 ' t\ 1. 1 j J I ]t J t til I. betake id ii ^f^in-ed 

□ N. The scope titlnbute i< quired -0*ko*ii B ^ C drt ihCwrett 

□ <J. 11irsoap« i iLmlniLL'i^..|ML 1 .n.ili>ml 1 ld" i nil[^. i rQquHst. ^ ,s "T^ 1 *^ 
rif de-f *.lti to Mqe 

d 1). Kilhiii llu- class <u type :t mi Uut« ttuiy lie *]ieri fitd, 

C9 K. Ii i* id In i hull IjH.itii the class attribute ant! the type 
nth ilttttr, even II" their ysIisMff are NOT th<: Bi 

C JSP vZ O 

Ho* Wyltld you bftltitfe dynamic conloil in aJSR similiir (ffl a 

server-side include {SSI)? (Choose all that apply ,1 -Gybor A to .^orrftt bet*« <t 

□ A. <%i include file**" /segments /footer . jspf *> i»sei include d^etti**, which * 

□ ii <jsp: forward page-"/ segments / f ooter . jspf" /> ff^Xt^lSe^ 
0 C. < j sp: Include page-" /segntents/f ooter . }spf " /> 

G 1>. RequestDispatcher dispatcher 

- request . getRequestDispatcher ( "/segments /footer . Jspf ") ; 
dispatcher . include (request , response) ; 

-Oybw D wuld be correct i-f H: was J scfiptlet it functionally d«s 
tVte s**e thinij. a* of ban C, Wk rb synta* is only «d by iewleti- 



In ,-tn HTML page with H rich, graphical lnyimi, uhirJi jSl'siiintliird ailion ctUI 
be i Lscel tit irapfjj"t an image file int" the J3P page? 

□ A. <jsp: image page="lego ,png" /> -tyb^ & ir '^ ^ f T^j^t-, 

□ a <jsp:lmage rUe="logo .png" /> c u mM ^ 

□ C. <j B p: include page-" logo .png' /> ^ i«U fr« J£P ""^t 

□ !>. < j3 p : lnclude fl*^^ /> ^^aSJ^SbSSf 

Sf K. I his CANNOT h. ; done usinK aJSE standard action, ^ » * tnjky ^.eiticn b«£A»« 't <* 

K0T possible to import tl* tontenti of 
jny binary file into J JSP pa«je ; whith 
^CBfirates Ah HTML response. 
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Given: (J£P <*1C leiW l& 

1. package com. example ; 

2. public class My Functions { 

3. public static String repeat (int x, String str) { 

4. ti method body 

5. } 
} 

And i^ivcn <hc JM': 

1. <fc@ taglib ur i= " /WEB - INF/rayf uncts " prefbt= "my" %> 

2 . <% — insert code here — %> 



Whi. li. inieited at His 2 in the JSP, is a valid EL Rtnctioa invocation? 

□ A $ (repeat (2, "420")) 

□ fi. ${ repeat P2", "420")) 

□ a S{my: repeat (2, -420 -J) 

□ IV $imy: repeat ("2", "420")} ,0^«, t >* '^^^ 
^ I.. A valwl iiivu, .,ih.u CANM ) 1 I..- cklcrminrd. J^J^ TlB^VnOT 

IS (i,VH " : usp-w> 

10, public class My Bean { 

11. private java . util .Map params ; 
L2 . pr ivate j ava .util. List objects; 

13, private String name; 

14. public java .util .Map getParams ( ) ( return parama ; } 

15. public String gettJameO I return name." } 

16, public java. util. List getObjects() { return objects; } 
if. f 

Whk'li will cause errors (a«sittrn; thai eui attribute named my be an rjn lie found, and 
in of type MyBean: ,' (Choose iill thai jpply, i 

□ A. $ {my bean. name) 

□ ft S{mybeanpnara&''? ) 

biJ < $ [raybcan objects .a} _0^ti dw C 3*4 ^ 

□ I). $ { mybean [ "paraum "] .a) V KOT a Urt r roperty a*d 



I". ${mybean ["objects"] .a) 
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1. The user has sufficiently logged in or out: 
'A. Sfparam. loggeolln or par am. loggecHJut^ . 

If Lht- request includes the query string "loggedOut=true" , ubat will be ihis 

MiiM'iui-ulV dLsphiYi-d V;iltU'. J 

0 H. The usee has sufficiently Logged in or out: true. ,0^*1 0 a ewretft befcJwsc 

□ (:. The user has sufficiently Logged in or out: $fparam. : KL e*fresiwn i*sm* "or" 

loggedln or param. loggedOut) . rt W tr« ir *dJi<r 

n li*ud|» or IcaudOiii il W 

LI |>. ThQ user has sufficiently Logged in or out: param. 

loggedln or param. loggedOut. 

□ Y.. The user has sufficiently Logged in or out: or true. 



17 



Which about EL access operators are true? [Choose all that apply.} 



3- 



A. Amvm Ih i i- (lie . [dot] iiprrnKfr is used, I In- [] could be Used 
instead 



LI K. AiiYwht-n' tin- [] !i|n r,n>M is gird, iln , nlHtHrould be ased 
instead. 



LI C. f r the . (dbl) Opferatef k lifted to aceesa a be&p property I-hii the 
pirrpcrtv doesn't exist, then ;t iiiiilintc exception is thrown. 

n fVW E> 11 interred bet**J« 

U 0. Itictc ate sotitc situations where the * (dot)opcr^or miul b« "jf "j 1 oPO -at* r £3" ahwaf ■* 

used and uthcr situations wherr die [] operator rmisl be Used. ^ tr \£&\j> U< D oferaW 



The following <-<kIc- fragment ftppew) in *JSP page: (JSP ^ ^^'^ ^ 

< j sp : include page=" / j spf /header . html" /> 

The JSP page k pari of a web application with die contcs.1 rootayapp. 

Gives thai tte tqspHcstioifis top level direttary Umyapp, whai is the pjttli nt the 
header -html lilr? 

□ A /header .html T ^ fi _^ A s? f AeadrriiW wken ussd a* 

□ ]i . / j s p f / h ea de r . h tml fcfa vaLe oT the <jsf i*tlude> atWi f aje 

□ 1). / includes/ j spf /header html ^litatioti's bsf lt«l-" 
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An online jrwdry retailer wisht.it to customize their online catalog for itsen who 
ittp KJggtd in, *l hey Wanl in show speitah toi 1 1 1 ■ - (tsier's biiilisiniie month. I he 
carapany's special rifling are stored as ;i Map<String, Special [] > identified as 
specials in .implication scope and updated daily. 

There ds a bean stored a* h sesiiKJn^KJopcd Mttirbuu' uiniicil userlnfo. < ..illimj 
getEirthdate 0 getHonthO mi (bis htm vM return tht mw*4 birtfastene 

month. 

Which of the following code snippet* could currcrtly retrieve the appropriate special 
offarings? 

d ,\ $ {applications cope [userlnfo.birthdate .month, specials] J 
$ {applications cope . specials [user Info . birthdate. month] } 
Q £{ applications cope [ "specials" ] . user Info .birthdate .month.} 
Q il $ {applications cope ["userlnfo, birthdate .month"] , specials} 

-Ofim B ^onrectfy reW, ^ A?^^^ £fe£iat r], ^ ^ , Jj^ 

^t. , , * tte "F tl «• ^ «l« fcrn toe »'< bit-tiidav a*d 
3 * the k 1 f " a Sp^n * the Mjp, M^mj * <*itch 

i« W.d .* the Map, »* SfeeialCJ * returned- Thi, EL CoJd be «ed b, a & 
+ortach tJj to iterate over the returned mtitfk 

A web based application fur a major online movie rental retailer stores a lcp 10 afcl** 

List<Movie> as a sesiiop attribute £a Contain movies the user has requested, 

A random, embedded movie trader front this Ii^i must display on ihe user*' 
main p*gC CVtery tittle tin* units" main page is viewed. 

Management think? a simitar feature will be needed in the near future an 
Other pages that display lists of movies. Streaming video is accomplished with 
]■. ijiil.u HTML, fust likr adding images to 3 page bin vxiiti trtore complex WgS- 

The development ream needs a solution Lliat is both flexible and maintainable, 
(hie possible solution tg create an EL function. I lit following statement* 
air from .1 if.un meeting concerning EI, (Unctions as a solution te this 

problem. Whkh statements air true.' i Choose all thai apojv.) ~Oftw* h the mavie Mn be passed 

r-f as * P*-*-«t*r to -the functior, ' 

I — I A, El, functions can not solve Lh» problem because ifiey can iml retrieve 

session attribute* «0f&»" & : *M* 

□ H. The meflhid implementing the EL Junction should not be declaim! EL <WW «»nt bt 
- static to give it access to session scope-. declared public and sUtiC 

iZ) 0. Tin- EL linn lion can access! a paranreter of java, util , List - Option 0 a List t*a<f b< paued to 
- whk h will allow llie needed movie Iht io he passed in ii using EL- the -knit ion D<»n^ jo provides a 

Bl). V tifrln have to write HTML tags in the middle of Java code using fleKjtle tH*» ot,e that 

<trt EL Turn lion, which is mop- difficoh to maintain. ***** V** r &* Wtio« t* handle 

seuwn stope tt in opteni a Jil£ | b 

^Optic D: &c «*fP «t to choose £ EL ^ 

total «>lution The tea- ch« t- Ml I t*j f if* * ttc M 
then aho t«at«d » EL Ut» that J G^fbp ^ 

C,I3pter 9 , el3<rftJ a random number ba«d on the MM of the Collection 
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Custom tags are powerful 




Sometimes you need more than EL or standard actions. 

What if you want to loop through the data in an array, and display one item per 
row in an HTML table? You know you could write that in two seconds using a for 
loop in a scriptlet. But you're trying to get away from scripting. No problem. When 
EL and standard actions aren't enough, you can use custom tags. They're as 
easy to use in a JSP as standard actions. Even better, someone's already written 
a pile of the ones you're most likely to need, and bundled them into the JSP 
Standard Tag Library (JSTL). In this chapter we'll learn to use custom tags, and 
in the next chapter we'll learn to create our own. 



this is a new chapter 
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official Sun exam objectives 

Objectives 



Btilcf ngj SP pages using lag libraries 

9.1 Describe the syntax and semantics of the 'taglib' 
directive: for a standard tag library, for a library of 
Tag Files. 



9.2 Given a design goal, create the custom tag 
structure to support that goal. 

9.3 Identify the tag syntax and describe the action 
semantics of the following JSP Standard Tag Library 
(JSTL v1 .1 ) tags: (a) core tags: out, set, remove, 
and catch, (b) conditional tags: if, choose, when, 
and otherwise, (c) iteration tags: forEach, and (d) 
URL-related: url. 



Gouerage Notes: 

All of the objectives in this section are covered 
in this chapter, although some of the content is 
covered again in the next chapter (Developing 
Custom Tags). 



Installing the J STL 1.1 

The JSTL 1 .1 is NOT part of the JSP 
2.0 specification! Having access to 
the Servlet and JSP APIs doesn't 
mean you have access to JSTL. 

Before you can use JSTL, you need 
to put two files, "jstl.jar" and "standard 
jar" into the WEB-INF/lib directory of 
your web app. That means each web 
app needs a copy. 

In Tomcat 5, the two files are already 
in the example applications that ship 
out-of-the-box with Tomcat, so all you 
need to do is copy them from one 
directory and put them into your own 
app's WEB-INF/lib directory. 

Copy the files from the Tomcat 
examples at: 

webapps/jsp-examples/WEB-INF/ 
lib/jstl.jar 

webapps/jsp-examples/WEB-INF/ 
lib/standard.jar 

And place it in your own web app's 
WEB-INF/lib directory. 
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There's got to be a 
way to iterate through a 
collection in a JSP. ..without 
scripting. I want to show 
v. one element per row in 
a table... / — ' 

O ^ — 

o 




EL and standard actions 
are limited 

What happens when you bump into a brick wall? 
You can go back to scripting, of course — but you 
know that's not the path. 

Developers usually want way more standard actions 
or — even better — the ability to create their own 
actions. 

That's what custom tags are for. Instead of saying 
<jsp:setProperty>, you want to do something like 
<my:doCustomThing>. And you can. 

But it's not that easy to create the support code 
that goes behind the tag. For the JSP page creator, 
custom tags are much easier to use than scripting. 
For the Java programmer, however, building the 
custom tag handler (the Java code invoked when a 
JSP uses the tag) is tougher. 

Fortunately, there's a standard library of custom 
tags known as the JSP Standard Tag Library 

JSTL 1.1). Given that your JSP shouldn't be doing 
a bunch of business logic anyway, you might find 
that the JSTL (combined with EL) is all you'll ever 
need. Still, there could be times when you need 
something from, say, a custom tag library developed 
specifically for your company. 

In this chapter, you'll learn how to use the core 
JSTL tags, as well as custom tags from other 
libraries. In the next chapter, we'll learn how to 
actually build the classes that handle calls to the 
custom tags, so that you can develop your own. 
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where's my html? 



The case of the disappearing HTML (reprised) 

On page 384, you saw how EL sends the raw string of content directly 
to the response stream: 



<div class= ' tipBox ' > 

<b>Tip of the Day:</k» <br/> <br/> 

$ {pageContent . currentTip } 
</div> 



, ^member tV.s? The <b><A» 
taas d.d^'-t show u ? as tM, but 
y>t rendered as a* em ? ty 
-that was bolded- 



What we got 



<div class= ' tipBox ' > 

<b>Tip of the Day:</b> <br/> 
<b></b> tags make things bold! 
</div> 



This tomes out 
as an "invisible 

bolded empty spate- 



Rendered as 

J 



"h - Ifa^f cli 1 1 ^"FitEp J/foca iHbstBUWtestf S P l/TestercIo 






Tip of the Day: 






'tags make things bold! 







What we want 



<div class= 1 tipBox ' > 

<b>Tip of the Day:</b> <br/> <br/> 
<b> < /b> tags make things bole 
</div> 




■ fl ■ o ■ «■ l^"KKn://lDcalhost:808D/teB;l 5P 1/Tester.do 



J't is irehdemed as "<» , . 
'S^ « «»de* d as V. d 

^^^^^^^^^^^^^^^^ 



Tip of the Day: 

<bx/b> tags make things bold! 



What we need is a way to convert those angle brackets into 
something the browser will render as angle brackets, and there 
are two ways to do this. Both use a static Java method that 
converts HTML special characters into their entity format: 

Use an EL function 



Use a J ava helper method 



<div olass= ' tipBox ' > 




<b>Tip of the Day:</b> <br/> 


<br/> 


$ { f n : convEntity (pageContent . 


currentTip) } 


</div> 





<div class= ' tipBox ' > 

<b>Tip of the Day:</b> <br/> <br/> 
$ { pageContent . convertedCurrentTip } 

</div> 
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Here's -the 
helper method 
to make -this 
one work 



public String getConvertedCurrentTip ( ) { 
return HTML . convEntity (getCurrentTip ( ) ) 

} 



using JSTL 



There's a better way: use the <c:oot> tag 

Whichever approach you use, it's a bit unclear exactly what's 
going on... and you may have to write that helper method for 
all your servlets. Luckily, there's a better way. The <c:out> 
tag is perfect for the job. Here's how conversion works: 



You can explicitly declare the conversion of XML entities 

If you know or think you might run into some XML entities 
that need to be displayed, and not just rendered, you can use the 
escapeXml attribute on c:out. Setting this to true means that any 
XML will be converted to something the web browser will render, 
angle brackets and all: 

<div olass= ' tipBox ' > 

<b>Tip of the Day:</b> <br/> <br/> 

<c : out value= ' $ {pageContent . currentTip} 1 escapeXml= ' true ' 
</div> 



/> 



You can explicitly declare NO conversion of XML entities 

Sometimes, you want just the opposite behavior. Maybe you're 
building a page that takes content, and you want to display that 
content with HTML formatting. In that case, you can turn off 
XML conversion: 



Vouv HTML is -tveaied 
as yttTML, */KitK i* W> 
is y.ML- so this a^etb 
HTML thavatievs, W 



<div class= ' tipBox ' > 

<b>Tip of the Day:</b> <br/> <br/> 
<c : out value= ' $ {pageContent . rawHTML } 

</div> 



escapeXml= ' false ' /> 



Conversion happens by default 

The escapeXml attribute defaults to true, so you can leave it out if 
you want. A c : out tag without an escapeXML attribute is just the 
same as a c : out tag with escapeXML set to "true." 



T had any HTML 

^Played as -fc ext 




<div class= ' tipBox ' > 

<b>Tip of the Day:</b> <br/> <br/> 
<c:out value= '$ {pageContent . currentTip } ' 

</div> 



/> 



TKis is actually identital m 

-Punttionali-fcy ho tKis. 
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escaping html 



^tkereiarejio 

Dumb Questions 



Which HTML special characters are converted? 



A: 

Xj_ It turns out this conversion is rather simple. There are only five 
characters that require escaping: <, >, &, and the two quote symbols, 
single and double ". All of these are converted into the equivalent HTML 
entities. For example, < becomes <, & becomes &, and so on. 

O: 

^r^, Last month my company hired a web consultant to audit our 
web application. She noticed that we were using EL everywhere to 
output strings entered by users. She said this was a security risk and 
recommended we output all user strings using the c:out tag. What gives? 

A: 

£\ Your consultant was right. The security risk she is referring to is called 
cross-site hacking or cross-site scripting. The attack is sent from one user 
to another user's web browser using your webapp as the delivery mechanism. 



Character 


Character Entity Code 


< 


< 


> 


> 


& 


Samp; 




&#039; 


T? 


" 



UseM 
"cracker" 



The cracker enters a comment field in your webapp, 
which is stored in the database. The cracker includes 
viral JavaScript code in the comment. 




The innocent user views the cracker's comment, 
but the text the cracker entered also includes 
JavaScript code that compromises user2's system! 



What happens if value of the EL expression is null? 

A: 

£\ Good question. You know an EL expression ${evalsToNull} 
generates an empty string in the response output, and so will 
<c : out value=" $ { evalsToNull }"/>. 

But that's not the end of the story with c : out. The c : out tag is smart, and 
it recognizes when the value is null and can perform a special action. That 
action is to provide a default value... 



Wowser. TY»« frevo** ^ , 
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Null values are rendered as blank text 



Suppose you have a page that welcomes the user by saying 
"Hello <user>." But lately, users haven't been logging in, and 
the output looks pretty odd: 

EL prints nothing if user is null 



<b>Hello $ {user } . </b> 



Renders as 



<b>Hello . </b> 



A JSP expression tag prints nothing if user is noil 

<b>Hello <%= user %>.</b> 



Renders as 




«*l"*fce to „ u ||, you ^ e , 
****** Warf the^ 
"netty sbraqt looking... 



<b>Hello . </b> 



Set a default value with the default attribute 



Suppose you want to show these anonymous users a message 
that says, "Hello guest." This is a perfect place to use a 
default value with the c:out tag. Just add a default 
attribute, and provide the value you want to print if your 
expression evaluates to null: 

<c:out> provides a default attribute , 



This value is ow-bpwt i-f i^e value 
attribute evaluates -bo null- 



<b>Hello <c:out value=' $ { user } ' default=' guest' />.</b> 




Now -the default value is 



Or you can do it this way: 

<b>Hello <c:out value=' $ { user } ' >guest</c : out></b> 
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the <c:forEach tag 



Looping without scripting 

Imagine you want something that loops over a collection (say, an array of 
catalog items), pulls out one element at a time, and prints that element in a 
dynamically-generated table row. You can't possibly hard-code the complete 
table — you have no idea how many rows there will be at runtime, and of 
course you don't know the values in the collection. The <c:forEach> tag is 
the answer. This does require a very slight knowledge of HTML tables, but 
we've included notes here for those who aren't familiar with the topic. 

By the way, on the exam you are expected to know how to use <c:forEach> 
with tables. 



Servlet code 

String [ ] movieList = {"Amelie", "Return of the King", "Mean Girls'' 
request . setAttribute ("movieList", movieList) ; 



What you want 



M l k ! > sWj of 



' http://localhost:8080/teslj SPl/Tester.do 



Movie list: 

Amelie 

Return of the King 
Mean Girls 




In a J SP, with scripting 

<table> 

<% String [ ] items = (String!]) request . getAttribute ( "movieList" ) ; 
String var=null; 

for (int i = 0; i < items . length; i++) { 
var = items [ i ] ; 

%> 

<tr><td><%= var %></td></tr> 
<% } %> 
</table> 
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<c:forEach> 



The <c:forEach> tag from the JSTL is perfect for this — it gives you 

a simple way to iterate over arrays and collections. . i JA.-.« -kaalA) 



J SP code 



w 

direfctWe 



£ later* 



<%@ taglib prefix="c" uri="http : // j ava . sun . com/ j sp/ j stl/core'' 
<htmlxbody> 

<strong> Movie list : </strong> 
<br><br> 



<table> 

<c:forEach var="movie" items="$ {movieList } " > 

<td>$ {movie} </td> 
</tr> 
</c: forEach> 

</table> 

</body></html> 



Crash refresher on HTML tables 

<table> 



<tr> 
<tr> 
<tr> 



<td>data for this cell</td> 


<td>data for this cell</td> 


<td>data for this cell</td> 


<td>data for this cell</td> 


<td>data for this cell</td> 


<td>data for this cell</td> 


<td>data for this cell</td> 


<td>data for this cell</td> 


<td>data for this cell</td> 



</tr> 
</tr> 
</tr> 



</table> 



Tables are pretty straightforward. They've got cells, arranged into rows 
and columns, and the data goes inside the cells. The trick is telling the 
table how many rows and columns you want. 

Rows are defined with the <tr> (Table Row) tag, and columns are 
defined with the <td> (Table Data) tag. The number of rows comes 
from the number of <tr> tags, and the number of columns comes from 
the number of <td> tags you put inside the <tr></tr> tags. 

Data to print /display goes only inside the <td> </td> tags! 
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the <c:forEach tag 



Pecowstroctiwg <c:f orEach> 



The <c:forEach> tag maps nicely into a for loop — the tag repeats the body of 
the tag for each element in the collection (and we use "collection" here to mean 
either an array or Collection or Map or comma-delimited String). 

The key feature is that the tag assigns each element in the collection to the 
variable you declare with the var attribute. _ 

The <c:forEach> tag 



<c:forEach var="movie" items="$ {movieList }" > 


$ {movie } 






/ 


\ "~ 


</c : forEach> 


1 / 



String[] i 


terns = (String[]) request 


getAttribute ("movieList") ; 


for (int i 

^^^^ 


t 0; i < items . length; i- 


-+) { 


String 


movie = items [i]; 




out . println (movie) ; 

r 

} 





hiatus ^ak,, , 

k u a * ew liable 
w "t holds an ihsfj,,/ r 

Getting a loop counter with the optional varStatus attribute *e*-v| e -£ m , °+ javax. 



<table> ^ 

<c:forEach var="movie" items="$ {movieList } " varStatus="movieLoopCount" > 

<tr> 

<tcl>Count : $ {movieLoopCount . count } </td> 
</tr> 
<tr> 

<td: Coun((T) 



Count£"T) 
Amelie 



</tr> 
</c : f orEach> 
</table> 



C Helpfully, the 
v LoopTagSiatus class has 

3've you the va | ue 
o+ the iteration touh-fcev. CountH J 
ft-ike -the "i" i n a £»- Mean Girls 

loop.) 
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You caw even west <c:f orEach> tags 

What if you have something like a collection of collections? An array of 
arrays? You can nest <c:forEach> tags for more complex table structures. 
In this example, we put String arrays into an ArrayList, then make the 
ArrayList a request attribute. The JSP has to loop through the ArrayList 
to get each String array, then loop through each String array to print the 
actual elements of the array. 

Servlet code 

String[] moviesl = {"Matrix Revolutions", "Kill Bill", "Boondock Saints' 
String [ ] movies2 = {"Amelie", "Return of the King", "Mean Girls"}; 
j ava . util . List movieList = new j ava . util .ArrayList () ; 
movieList . add (moviesl) ; 
movieList . add (movies2 ) ; 

request . setAttribute ( "movies" , movieList ) ; 



J SP code 



loop 



<table> 



TV* 



<c:forEach var="listElement" items="$ {movies } " > 

^ ^ 



\oo\ 



<c:forEach var="movie" ltems="${listElement}" > 
<tr> 

<td>$ {movie } </td> 
</tr> 
- </c ; forEach> 



</c : f orEach> 

</table> 

pvom tV>e setond S-tv'lin^C] ■ 



■ ■ : ■ : ^ http://localhostSOaOAeslJ SP 1/Tester.do 




Matrix Revolutions 




Kill Bill 




Boondock Saints 




Amelie 




Return of the King 




Mean Girls 





you are here ► 449 



the <c:forEach tag 



0: 

How did you know that the "varStatus" attri- 
bute was an instance of whatever that was, and how 
did you know that it has a "count" property? 

A: 

Xj_* Ahhhh... we looked it up. 

It's all there in the JSTL 1.1 spec. If you don't have the 
spec already, go download it NOW (the intra of this 
book tells you where to get the specs covered on the 
exam). It is THE reference for all the tags in the JSTL, 
and tells you all the possible attributes, whether they're 
optional or required, the attribute type, and any other 
details on how you use the tag. 

Everything you need to know about these tags (for the 
exam) is in this chapter. But some of the tags have a few 
more options than we cover here, so you might want to 
have a look in the spec. 



0: 

Since you know more than you're telling 
about this tag... does it give you a way to change the 
iteration steps? In a real Java for loop, I don't have to 
do i++, I can do i +=3, for example, to get every third 
element instead of every element... 

A: 

Xj_ Not a problem. The <c:forEach> tag has optional 
attributes for begin, end (in case you want to iterate 
over a subset of the collection), and step if you want to 
skip over some elements. 



^>^, Is the "c" in <c:forEach> a required prefix? 

A: 

Xj_* Well, some prefix is required, of course; all tags 
and EL functions must have a prefix to give the Contain- 
er the namespace for that tag or function name. But you 
don't HAVE to name the prefix "c". It's just the standard 
convention for the set of tags in JSTL known as "core". 
We recommend using something other than "c" as a 
prefix, whenever you want to totally confuse the people 
you work with. 



The "var" variable is 
-TTy, scoped to ONLY the tag! 

Watch it! 

That's right tag scope. No this isn't a full-fledged scope 
to which you can bind attributes like the other four- 
page equest, session, and application Tag scope 
simply means that the variable was declared INSIDE a 
loop. 

And vou already know what that means in Java terms. 
Vol 7 1 see hat for most other tags, a vanable set with 
Tvl attTute will be visible to whatever scope you 
specifically set (using an optional "scope" attnbute), OR, 
the variable will default to page scope. 

So don't be fooled by code that tries to use the variable 
somewhere BELOW the end of the 
<c:forEach> body tag! 

»-Fon" items="${fooList}" > 
<c:forEach var="foo xtemb 

${foo} -OK 

</c:forEach> 
${foo> ^ w toWoYe! 

^^^^ 

It might help to think of tag scope as being just like 
IZk scope in plain old Java code. An example ,s the 
for loop you all know and love: 

for (int i = 0; i < items . length; i++) < 
x + i; 



doSomething 
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Poing a conditional include with <c:if> 

Imagine you have a page where users can view comments from other users. And 
imagine that members can also post comments, but non-member guests cannot. 
You want everyone to get the same page, but you want members to "see" more 
things on the page. You want a conditional <jsp:include > and of course, you don't 
want to do it with scripting! 



What members see: 



What NON-members see: 




Member Comments 



This she rocks. 
This site is owl. 
This site is stupid. 



Add your comment: 



'Add Comment"^ 



T:.o://tocalho;t:8D8D/test|SPl^ster.dc 



Member Comments 

This site rocks. 
This site is cooi. 
This site is stupid. 



1 



J SP code 



<%@ taglib prefix="c" uri="http : // j ava . sun . com/ j sp/ j stl/core 
<htmlxbody> 

<strong>Member Comments</strong> <br> 
<hr>$ { commentList } <hr> 



<c:if test="${userType eq 'member'^}" > 



T^a^UU^scdo^ 



< jsp : include page="inputComments . jsp"/> 

</c: if> 

</body></html> 

Included page ("inputComments.jsp") 



Yes, -those ave S/Nq"LE 
•\uo-tes a\rou*d Wr»be/ 
M forget ihat you ia* 
<«e EITHER double or smgle 
•\uo-tes ih your tags a*d EL. 



<form action="commentsProcess . j sp" method="post"> 
Add your comment : <br> 

<textarea name="input" cols="40" rows="10"x/textarea> <br> 
<input name="commentSubmit" type="button" value="Add Comment"> 
</f orm> 
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the <c:it> tag 



Put what if you weed aw else? 



What if you want to do one thing if the condition is true, and 
a different thing if the condition is false? In other words, what 
if we want to show either one thing or the other, but nobody will 
see both? The <c:if> on the previous page worked fine because 
the logic was: everybody sees the first part, and then if the test 
condition is true, show a little extra. 

But now imagine this scenario: you have a car sales web site, and 
you want to customize the headline that shows up on each 
page, based on a user attribute set up earlier in the session. 
Most of the page is the same regardless of the user, but each user 
sees a customized headline — one that best fits the user's personal 
motivation for buying. (We are, after all, trying to sell him a car 
and become obscenely wealthy.) At the beginning of the session, a 
form asks the user to choose what's most important... 

At the beginning of the session: 



; - "http://localhost:8080/testJSPlfrester.do 



When buying a car, what is most 
important to you? 



K Performance 
5 Safety 



t Submit J 



Somewhere later in the session 




Imagine a web site for a 
car company. The first 
page asks the user what he 
feels is most important. 

Just like a good salesman, 
the pages that talk about 
features of the car will 
customize the presentation 
based on the user's 
preference, so that each 
feature of the car looks 
like it was made with IJIS 
personal needs in mind- 



Now you can stop even if you do 
drive insanely fast. 

The Brakes 

Our advanced anti-lock brake system (ABS) 
is engineered to give you the ability to steer 
even as you're stopping. We have the best 
speed sensors of any car this size. 



452 chapter 9 



using JSTL 



The <c:if > tag won't work for this 

There's no way to do exactly what we want using the <c:if> tag, because it 
doesn't have an "else". We can almost do it, using something like: 

J SP using <c:if>, but it doesn't work right... 

<c:if test="$ { userPref==' performance' } " > 

Now you can stop even if you <em>do</em> drive insanely fast.. 
</c : if > 

<c:if test="$ {userPref==' safety' } " > 

Our brakes won't lock up no matter how bad a driver you are. 
</c : if > 

<c:if test="$ { userPref==' maintenance' } " > 

Lost your tech job? No problem--you won't have to service these brakes 
for at least three years . 

<!-- continue with the rest of the page that EVERYONE should see --> 



The <c:if> won't work unless we're CERTAIN that we'll never need a default 
value. What we really need is kind of an if/ else construct:* 

J SP with scripting, and it does what we want _ n SSUBie w j iev . m ^y, e session 

<htmlxbody><h2> ^ 
<% String pref = (String) session . getAttribute ( "userPref" ) ; 
if (pref . equals ("performance" ) ) { 

out . println ( "Now you can stop even if you <em>do</em> drive insanely fast."); 
} else if (pref . equals ( "safety" ) ) { 

out . println ( "Our brakes won't lock up, no matter how bad a driver you are. ") ; 
} else if (pref . equals ( "maintenance" ) ) { 

out . println ( " Lost your tech job? No problem--you won't have to service these 
brakes for at least three years."); 
} else { 

// userPref doesn't match those, so print the default headline 
out . println ( "Our brakes are the best."); 

} %> 

</h2><strong>The Brakes</strong> <br> 

Our advanced anti-lock brake system (ABS) is engineered to give you the ability to 
steer even as you're stopping. We have the 
best speed sensors of any car this size. <br> 

</body></htmi> * Yes - we a 9 ree witn you— there's nearly always 

a better approach than chained if tests. But 
you're just gonna have to suspend disbelief long 
enough to learn how this all works.... 
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the c: choose tag 



I will CHOOSE 



you 



i are ready to give 



WHEN 

up your obsession with Pilates. 
OTHERWISE, I'll have to go 
with Kenny for the synchronized 
swim team. 




The <c:choose> tag awd its partners 
<c:whew> and <c:otherwise> 



<c : choose> 

<c:when test="$ {userPref == 'performance' }"> 

Now you can stop even if you <em>do</em> drive insanely fast. 
</c:when> 

<c:when test="$ (userPref == 'safety' }"> 

Our brakes will never lock up, no matter how bad a driver you are. 
</c:when> 

<c:when test="$ (userPref == 'maintenance' }"> 

Lost your tech job? No problem--you won't have to service these brakes 
for at least three years . 

</c:when> 



<c : otherwise> 

Our brakes are the best . ' 
</ c : otherwise> 
</c : choose> 

<!-- the rest of the page goes here. 



the <d.o-the^w,se> nw as a default 



Note: the <t:thoose> tag is NOT 
required to have a <t:othevwise> tag- 
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The <c:set> tag... so much cooler thaw <jsp:$etProperty> 



The <jsp:setProperty> tag can do only one thing — set the property of a bean. 

But what if you want to set a value in a Map? What if you want to make a new entry in a Map? 
Or what if you simply want to create a new request-scoped attribute? 

You get all that with <c:set>, but you have to learn a few simple rules. Set comes in two 
flavors: var and target. The var version is for setting attribute variables, the target version is for 
setting bean properties or Map values. Each of the two flavors comes in two variations: with 
or without a body. The <c:set> body is just another way to put in the value. 

Setting an attribute variable var with <c:set> 



0 With NO body 



<c:set var="userLevel" scope=" session" value="Cowboy" /> 



h T : x *** KU 9 J a 

'» tke iag body ("see #2 belowX 
<c:set var="Fido" value="$ {person . dog} ' 



(2) WITH a body 



l-f f{pevsoh.dog} evaluates 
/> ndo is <A -type 

Renumber, »° 



<c:set var="userLevel" acape="session' 

Sheriff, Bartender, Cowgirl ^ 
</c:set> 



as «he i* <^ ^* 



„ the va/ue evaluates to null the variable will be 
REMOVED! That's right, removed. 

tribute), you use ${person.dogh ^W^rtyfenu// then ,7 there /S a variab/e 
fne re b no person, or gj** ^^f i «ed/ f/f you don. specjy 
attribute vwfn a name Rdo , naf »M« „ even rf 
a scope, /f wv// start toatang at ^ or a Bra cco//. 
the "F/do" attribute was originally set as a i>mng, or 
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the tag 

Using <c:set> with beans and Maps 

This flavor of <c:set> (with its two variations — with and without a body) 
works for only two things: bean properties and Map values. That's it. 
You can't use it to add things to lists or arrays. It's simple — you give it 
the object (a bean or Map), the property/key name, and the value. 



Setting a target property or value with <c:set> 

i , the ^** e 
If target ■* aV,ea "' » 

0 With NO body ^ of the yr^l fl0 ^ 

<c:set target="$ {PetMap} " property="dogName" value="Clover" /> 

S ? 

taryt NOT be «■ W is a ^ se£ {he 

«lue o+ a key *a*ed "dog/^e". 



(5) WITH a body fig***^ 



i I Ho s\asW.. -a^^ 



<c:set target="$ {person} " property="name" > .^Kis on the e* aw " 

${foo.name} ^ — ^ 
</c:set> ', hebod y^bea 
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Key points and gotchas with <c:set> 

Yes, <c:set> is easy to use, but there are a few deal-breakers 
you have to remember... 



Dumb Questions 

Why would I use the body version 
instead of the no-body version? It looks 
like they both do exactly the same thing. 

A: 

£\ That's because they DO... do the 
same thing. The body version is just for 
convenience when you want more room for 
the value. It might be a long and complex 
expression, for example, and putting it in 
the body makes it easier to read. 



0- 

If I don't specify a scope, does that 
mean it will find attributes that are ONLY 
within page scope, or does it do a search 
beginning with page scope? 

A: 

Xj_ If you don't use the optional "scope" 
attribute in the tag, then the tag will only 
look in the page scope space. Sorry, you 
will just have to know exactly which scope 
you are dealing with. 



0 : 

Why is the word "attribute" so 
overloaded? It means both "the things 
that go inside tags" and "the things that 
are bound to objects in one of the four 
scopes." So you end up with an attribute 
of a tag whose value is an attribute of the 
page and... 

A: 

Xj_ We hear you. But that's what they're 
called. Once again, nobody asked US. 
We would have called the bound objects 
something like, oh, "bound objects". 



y You can never have BOTH the Wand 'target" 
attributes in a <c:set>. 

>• "Scope" is optional, but if you don't use it the default 
is page scope. 

► If the "value" is null, the attribute named by "var" 
will be removed! 

► If the attribute named by "var" does not exist, it'll be 
created, but only if "value" is not null. 

► If the 'target" expression is null, the Container 
throws an exception. 

► The "target" is for putting in an expression that 
resolves to the Real Object. If you put in a String 
literal that represents the "id" name of the bean or 
Map, it won't work. In otherwords, 'target" is notfor 
the attribute name of the bean or Map- it's forthe 
actual attribute object. 

► If the 'target" expression is not a Map or a bean, the 
Container throws an exception. 

► If the 'target" expression is a bean, but the bean 
does not have a property that matches "property", 
the Container throws an exception. Remember that 
the EL expression ${bean.notAP roperty} will also 
throw an exception. 
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the c:remove tag 




<c:rewove> just makes sense 

We agree with Dick — using a set to remove 
something feels wrong. (But remember, set does a 
remove only when you pass in a null value.) 

The <c:remove> tag is intuitive and simple: 



<%@ taglib prefix="c" uri="http : // j ava . sun . com/ j sp/ j stl/core" %> 
<htmlxbody> 

<c:set var="userStatus" scope="request" value="Brilliant" /> 

The yjy- J-£-£y-"L I 

WlA£T t o± userStatus: $ { userStatus } <br> 

^nllt'P ^ 

expy es ■ // <c: remove var="userStatus" scope=" request" /> 

userStatus is now: ${ userStatus } 

</bodyx/html> ihe'^ttt 1 '! ^ ^ ' eav « 

"k©* i4LL stfopes ' s ^oved 



userStatus: Brilliant 
userStatus is now: 



AS? wl,eh to* El exDv . ° 



*"e»«ove. 



pv-essie 
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t^harpen your pencil 

^ — V 



Test your Tag memory 

If you're studying for the exam, don't skip this one. 
The answers are at the end of the chapter. 



0 Fill in the name of the optional attribute. 



<c:forEach var="movie" items="$ {movieList ] 

$ {movie } 
</c : forEach> 



■"foo" > 



© Fill in the missing attribute name. 



<c:if | (="$ {userPref==' safety' } " > 

Maybe you should just walk. . . 
</c : if > 



(3) Fill in the missing attribute name. 



<c:set var="userLevel" scope="session" 



="foo" /> 



0 Fill in the missing tag names (two different tag types), and the missing attribute name. 



<c : choose> 
<c : 



</c: 
<c : 



"${userPref == 'performance' }"> 
Now you can stop even if you <em>do</em> drive insanely fast 
> 



> 



Our brakes are the best. 



</c: 



</ c : choose> 
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the ic:imporP tag 

With <c:iwport>, there are wow THREE 
ways to include content 

So far, we've used two different ways to add content from another 
resource into a JSP. But there's yet another way, using JSTL. 

© The include directive 

<%@ include file="Header . html" %> 

Static: adds the content from the value of the file 
attribute to the current page at translation time. 



(2) The <jsp:include> standard action 



<jsp: include page="Header . j sp" /> 

Dynamic: adds the content from the value of the 
page attribute to the current page at request time. 



(3) The <c:import> J STL tag 



<c : import url="http : / /www . wickedly smart .com/skyler/horse. html" /> 



Dynamic: adds the content from the value of the 
URL attribute to the current page, at request time. 
It works a lot like <jsp:include>, but it's more 
powerful and flexible. 



Do NOT ton-fuse <t:impov~t> (a type of 
include) with the "import" attribute of 
the page div-efctive (a way -to put a Java 
import statement in the generated sewl< 



Thev all have different attribute names! 
J23 latch out for "include" vs. "import ) 



^■bp*^^^^ (And Wdttn ***** 

different word for the attribute. ^J^^^Smn you AM a.ouf ft... *rf you do Java 
the JSTL <c:import> tag uses ur Th,s intended or static layout templates, l.ke HTML 

to memorize all three. The directive was ongmally^ mtonaec ,r fc 
TaZs. in other words, a "file". ^^f^^SZt The aLute for <c,mpo«> 
coming from JSPs, so they named the attnbu te > ^ , nc/udes » can't go out Sl de 

is named for exactly what you give it-a URL! Hememo 
the current Container, but <c:import> can. 
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<c:iwport> caw reach 0UTS1PE the web app 



With <jsp:include> or the include directive, you can include only pages that are part of the 
current web app. But now with <c:import>, you have the option to pull in content from 
outside the Container. This simple example shows a JSP on Server A importing the contents 
of a URL on Server B. At request time, the HTML chunk in the imported file is added to 
the JSP. The imported chunk uses a reference to an image that is also on Server B. 



Server A, the J SP doing the import 



The J SP 



<%@ taglib prefix="c" uri="http : // j ava . sun . com/ j sp/ j stl/core" %> 
<htmlxbody> 

<c : import url="http : //www . wickedlysmart . com/ skyler /horse . html" /> 

<br> 

This is my horse. 
</body></html> 



Server B, the imported content 



(Pon't bctfb as with other include mechanisms, the iWg 
vou i»Port should be a» HTML &ay»e«t a*d HOT a 
flete page with ove«i«9 a«d closing <htmlxbody> tags.J 



y 

torn 



The imported file 

<img src="http : //www . wickedlysmart . com/ skyler/ ho rse.gif"> 
. 




The response 



f http/Ziocalhosteoso/testJ 5Pl/Tester.do 



// 

rr 



TVie horse \s ***** 
W a to^leielvf 



tha* ^e W 



t that 



This is my horse. t0 ^ m s t*e te*t 



B 



A 



'W.html" ahC | M h ov . se . 9 ^» av . £ 
both o» Serv^ B, a Completely 
d.+Wt web server {rom the 
°»e with the JSP. 
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the zc:imporP tag 

Customizing the thing you include 

Remember in the previous chapter when we did a <jsp:include> to 
put in the layout header (a graphic with some text), but we wanted to 
customize the subtitle used in the header? We used <jsp:param> to 
make that happen... 

(7) The J SP with the <jsp:include> 

<htmlxbody> 

<jsp: include page="Header . jsp"> 

<jsp:param name="subTitle" value="We take the sting out of SOAP." /> 
</ jsp : include> 

<br> I 

<em>Welcome to our Web Services ISupport Group. </em> <br><br> 

Contact us at: $ { initParam . mainEmail } 

</body></html> 

(f) The included file ("Header.jsp") 



<img src="images/Web-Ser^ces . jpg" > <br> 

<em><strong>$ {param . subTitle } </strongx/em> 
<br> 





\ * j [ A j [ C ] [ + ) 0 http://localhost:8080/tests/Contact.jsp 


PP J2SE 1.5 in a Nutshell Colorado C opers Home Slashdot: Ne. 


.hat matters orkut - home javaLiiet 


We take the sting out of SOAP. ^ 

Welcome to our Web Services Support Group. <. 

0 

Contact us at: likewecare@wickedlysmart.com ^ 


header OSPW*^** 
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Poiwg the same thing with <c:paraw> 

Here we accomplish the same thing we did on the previous page, but 
using a combination of <c:import> and <c:param>. You'll see that the 
structure is virtually identical to the one we used with standard actions. 

(?) The J SP with the <qsp:import> 

<%@ taglib prefix="c" uri="http : // j ava . sun . com/ j sp/ j stl/core" %> 
<htmlxbody> w/iia/ 4-U» 

<c: import url="Header . jsp" > ^ has a bo<ty 

<c:param name="subTitle" value="We take the sting out of SOAP." /> 

</ c : import> 

<br> 

<em>Welcome to our Web Services Support Group . </em> <br><br> 
Contact us at: $ { initParam . maipEmail ] 
</body></html> 



(D The included file ("Header.jsp") 



<img src="images/Web-Services . jpg" > <br> , than^e at all- It 

"V TWlS ^ the Parameter yt 



^ V 't tare HOW tV* ? ara-et 

em><strong>${param. SubTitle } </strongx/em> doesn T, , iv ey . e . 

there, as M as 



< 

<br> 
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URL rewriting in a JSP 



Sorry to change the 



noticed 



session 
without 
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<c:orl> for all your hyperlink weeds 



Remember way back in our old servlet days when we wanted to use a session? First 
we had to get the session (either the existing one or a new one). At that point, the 
Container knows that it's supposed to associate the client from this request with a 
particular session ID. The Container wants to use a cookie — it wants to include a 
unique cookie with the response, and then the client will send that cookie back with 
each subsequent request. Except one problem... the client might have a browser with 
cookies disabled. Then what? 

The Container will, automatically, fall back to URL rewriting if it doesn't get a cookie 
from the client. But with servlets, you STILL have to encode your URLs. In other 
words, you still have to tell the Container to "append the jsessionid to the end of this 
particular URL..." for each URL where it matters. Well, you can do the same thing 
from a JSP, using the <c:url> tag. 

URL rewriting from a servlet 

public void doGet (HttpServletRequest request, HttpServletResponse response) 



response . setContentType ("text/html") ; 
PrintWriter out = response . getWriter () ; 
HttpSession session = request . getSession () ; 

out . println ( "<htmlxbody>" ) ; 

out .println ("<a href=\"" + response . encodeURL ( "/BeerTest . do" ) + "\">click</a>" ) ; 
out .println ("</body></html>") ; 



URL rewriting from a J SP 

<%@ taglib prefix="c" uri="http : // j ava . sun . com/ j sp/ j stl/core" %> 
<htmlxbody> 

This is a hyperlink with URL rewriting enabled. 

<a href="<c:url value=' /input Comments . jsp' />">Click here</a> 



throws IOException, ServletException { 




</body></html> 
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the<c:URL> tag 



What if the URL weeds encoding? 



Remember that in an HTTP GET request, the parameters are appended to the URL as a query string. 
For example, if a form on an HTML page has two text fields — first name and last name — the request 
URL will stick the parameter names and values on to the end of the request URL. But... an HTTP 
request won't work correctly if it contains unsafe characters (although most modern browsers will try to 
compensate for this). 

If you're a web developer, this is old news, but if you're new to web development, you need to know 
that URLs often need to be encoded. URL encoding means replacing the unsafe /reserved characters 
with other characters, and then the whole thing is decoded again on the server side. For example, 
spaces aren't allowed in a URL, but you can substitute a plus sign "+" for the space. The problem is, 
<c:url> does NOT automatically encode your URLs! 

Using <c:url> with a query string 



Remember, the <c:url> tag does URL rewriting, but not URL encoding! 



<c:set var="last" value="Hidden Cursor" /> 
<c : set var="first" value="Crouching Pixels"/> 



attes s fa, tW,s «fac 



<c:url value="/inputComments. jsp?first=${first}&last=${last}" var="inputURL" /> 



The URL using params 



${inputURL} <br> 




The URL using params is: /myApp/inputComments. 
jsp?nrst=Crouching Pixels&last=Hidden Cursor 

spates m a MRU 



fete o^lcd- 



Using <c:param> in the body of <c:url> 

This solves our problem! Now we get both URL rewriting and URL encoding. 

^ slasVi 

<c:url value="/inputComments . j sp" var="inputURL" > 
<c:param name="firstName" value="$ {first} " /> 

<c:param name="lastName" value="${last}" /> „ . „,„w> 

</c : url> No „ W« Wtause < t: p»» 

takes ta«°Uv* 

Now the URL looks like this: ^ 

/myApp/ inputComments . j sp?firstName=Crouching+Pixels&lastName=Hidden+Cursor 
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You do NOT want your clients to see this: 



Apache Tomcat/5. 0.19 - Error report 

T~] | | [ C ] [ + ] Ohttp://localhost:«OBU/kathyjbf'l/Lhooselest.jsp 



CQ J2EE 1.5 in a Nutshell Colorado C.opcrs Home Sliishdott He. ..hat matters orkut home java.net 



HTTP Status 500 - 



[333 Exception report 



TiSCTffHTffllTThe server encountered an internal error i .1 that p 'evened ilf'jn fu IINna :his request 

org . apache . jasper . JasperException: / by zero 

org. apache . jasper .servlet .JspServletWrapper . service ( JspServletWrapper . java; 358 ) 
org . apache . jasper .servlet .JspServlet . service JspFile ( JspServlet. java: 301 )■ 
org . apache . jasper .servlet .JspServlet . service* JspServlet . java : 24B ) 
javax. servlet .http. HttpServlet . service ( HttpServlet . java: 856 ) 

java.lang.ArithmeticException: / by zero 

org . apache . jsp.ChooseTest_jsp._jspService(ChooseTest_jsp. java: 62 ) 
org . apache . jasper .runtime. HttpJsp&ase. service (HttpJspBase. jiava: 133 ) 
javax. servlet .http. HttpServlet . service ( HttpServlet . java: 856 ) 

org . apache . jasper .servlet . JspServletWrapper . service ( JspServletWrapper . javai 311) 
org . apache . jasper .servlet . JspServlet . service JspFile ( JspServlet . java: 301 )■ 
org . apache . jasper .servlet .JspServlet . servicer JspServlet . java : 248) 
javax .servlet .http. HttpServlet . service ( HttpServlet . java: 85fi ) 

Iff^The full stack trace of the root cause is available in the Tomcat logs. 



ache Tomcat/5. 0.19 



you are here ► 467 



error pages 



Make your own error pages 

The guy surfing your site doesn't want to see your stack trace. And he's not too thrilled 
to get a standard "404 Not Found", either. 

You can't prevent all errors, of course, but you can at least give the user a friendlier 
(and more attractive) error response page. You can design a custom page to handle 
errors, then use the page directive to configure it. 

The designated ERROR page ("errorPage.jsp") , , c 

< %@ page ffl^flmffll %> ^^^M «~ W 

<htmlxbody> 

<strong>Bummer . </ strong> 

<img src="images/bummerGuy . jpg"> 

</body></html> 



The BAD page that throws an exception ("badPage.jsp") 

<%@ page 



errorPage="errorPage . jsp" 



<htmlxbody> 
About to be bad. . . 
<% int x = 10/0; %> 
</body></html> 



What happens when you request "badPage.jsp" 



^OO Apache Tomcai/S.O.lU - Errof repon 

* fit' o : + : http://localhost:8080/tests/bad Page. jsp 



uP J^M. li in » HvUbtl Cotorwfo G...Ofnri Hoom SUihdot: N« ..ti*t miUui orlujl - home jwuH 



Bummer. 





<- 



The R^UeST 

- RESPONSE- «»e + (rom 
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She doesn't know about the <error-page> W tag. 

You can declare error pages in the DD for the entire web app, and you 
can even configure different error pages for different exception types, or 
HTTP error code types (404, 500, etc.). 

The Container uses <error-page> configuration in the DD as the 
default, but if a JSP has an explicit errorPage page directive, the 
Container uses the directive. 
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Configuring error pages iw the n 

You can declare error pages in the DD based on either the <exception-type> or 
the HTTP status <error-code> number. That way you can show the client different 
error pages specific to the type of the problem that generated the error. 



Declaring a catch-all error page 

This applies to everything in your web app — not just JSPs. 
You can override it in individual JSPs by adding a page 
directive with an errorPage attribute. 

<error-page> 

<exception-type> j ava . lang . Throwable</ exception-type> 
<location>/ errorPage . j sp</ location> 
</ error-page> 



Declaring an error page for a more explicit exception 

This configures an error page that's called only when there's an 
ArithmeticException. If you have both this declaration and the 
catch-all above, any exception other than ArithmeticException 
will still end up at the "errorPage.jsp". 

<error-page> 

<exception-type> j ava . lang . ArithmeticException</ except ion- type> 
<location>/ arithmeticError . j sp</location> 
</ error-page> 



Declaring an error page based on an HTTP status code 

This configures an error page that's called only when the status 
code for the response is "404" (file not found). 

<error-page> 

<error-code>4 04</ error-code> 
<location>/ notFoundError . j sp</location> 



</ error-page> 



The <u a w must k -< ,at ;;^ <* 

^ * MUST ****** £t ^> , <-4-'^> ) 
+> error ? ay « based «. <«nr* toac 
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Error pages get aw extra object: exception 

An error page is essentially the JSP that handles the exception, so the 
Container gives the page an extra object for the exception. You probably 
won't want to show the exception to the user, but you've got it. In a 
scriptlet, you can use the implicit object exception, and from a JSP, you 
can use the EL implicit object ${pageContext. exception}. The object is 
type java.lang.Throwable, so in a script you can call methods, and with 
EL you can access the stackTrace and message properties. 



A more explicit ERROR page ("errorPage.jsp") 

<%@ page isErrorPage="true" %> 

<htmlxbody> 

<strong>Bummer . </ strong><br> 



No-b the e*M?W implicit objefrt « 
available ONLY fe> em* f«je a » 
e*pkrtlY-de^ ed ? a 9 e d' ,,re « ,ve: 

|„ other *^ds, to«f a« em* P a<>e in 
4J, e W is «ot H 1 make tte Co "™ 
5 ive that pa 5 e the im ? litit e*de ? tio« °^t. 



You caused a 



$ {pageContext . exception} 



on the server. <br> 



<img src="images/bummerGuy . jpg"> 
</body></html> 
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What if I think there's 
an exception I might be able 
to recover from in a JSP? What 
if there are some errors I 
want to catch myself? 




The <c:catch> tag. Like try/catch...sorf of 

If you have a page that invokes a risky tag, but you think you can 
recover, there's a solution. You can do a kind of try/catch using the 
<c:catch> tag, to wrap the risky tag or expression. Because if you 
don't, and an exception is thrown, your default error handling will 
kick in and the user will get the error page declared in the DD. The 
part that might feel a little strange is that the <c:catch> serves as 
both the try and the catch — there's no separate try tag. You wrap the 
risky EL or tag calls or whatever in the body of a <c:catch>, and the 
exception is caught right there. But you can't assume it's exactly like a 
catch block, either, because once the exception occurs, control jumps 
to the end of the <c:catch> tag body (more on that in a minute). 

<%@ taglib prefix="c" uri="http : // j ava . sun . com/ j sp/ j stl/core' 

<%@ page errorPage="errorPage . j sp" %> 

<htmlxbody> 




About to do a risky thing: <br> 
<c : catch> 

<% int x = 10/0; %> ^ 

</c:catch> 

If you see this, we survived. 
</body></html> 



This stv-iptlet will DEFINITELY 
tause an exception... but we taught it 
instead o£ tv-iggev-ing tKe error page- 

* l-f this prints out, then we MOW 

we made it past the exception 
(whith in this example, means we 
suttess-Pully taught the exteption)- 



8QO _ 
■* ft C + '* htlp://loca!host:8080/tests/risky.jsp 

J2S* I.S In ■ NmiImM CtH«r*d* C op*-* h*t( Slultd«: Nt h n m*u«n m'ui 

About to do a risky thing: 
If you see this, we survived. 

^ taith must 
tave viorked... 
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But how do I get access to 
the Exception object? The 
one that was actually thrown? 
Since this isn't an actual error 
page, the implicit exception 
object doesn't work here. 




You caw make the exception aw attribute 

In a real Java try/catch, the catch argument is the exception object. 
But with web app error handling, remember, only officially-designated error 
pages get the exception object. To any other page, the exception just isn't 
there. So this does not work: 



<c : catch> 

Inside the catch. . . 

<% int x = 10/0; %> 
</c : catch> 



■the enttfpW* ob j ett ' 



Exception was: $ {pageContext . exception} 

Using the "var" attribute in <c:catch> 

Use the optional var attribute if you want to access the exception after 
the end of the <c:catch> tag. It puts the exception object into the page 
scope, under the name you declare as the value of var. 

<%@ taglib prefix="c" uri="http : // j ava . sun . com/ j sp/ j stl/core' 

<%@ page errorPage="errorPage . j sp" %> 

<htmlxbody> 



About to do a risky thing: <br> 
<c: catch var="myException"> 4 

Inside the catch. . . 
<% int x = 10/0; %> 
</c : catch> 



TW,s iwatw a ?ay-*f?* d B a , 

| his mot* v,P*/ev>-tion . 

assl ^s -the e*«?tw" ob -) ett W 



<c:if test="$ {myException ! 

There was an exception: 
</c : if> 

We survived. 

</body></html> 



= null}"> 

$ {myException. message} <br> 
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the <c:catch> tag 



F ,ow control works in a ^■"^"^hri'cat^ 
inatry block— NOTHING runs .ns.de the <c.catcn> 

body after the exception. 

,„ a reg u,ar Java ^ — "S"^- 

fl ttyou use. ttta opt/ona, Vaf ««*«, «. —P*» o Dj ac« k aspect to 
2) Bowjumps to Mm** body of toe <o:caBh> lag. 



cc:catch> 




Inside the catch. . . 
<% int x = 10/0; %> 
After the catch. . . ^ 



see 



</c:catch> 
We survived. 

Be catefut about to*, tt you »an , B - , ^^fSS^ 
SSSrr^—' WITHIN too 

catch Wo* but « tol A <=«W £ *™ «" » " nMds fof tes , a 
wbere you put «" "*y ccxfe. Except is *e W fof exrf w „ a( /, 
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What if you weed a tag that's NOT iw JSTL? 

The JSTL is huge. Version 1 . 1 has five libraries — four with custom tags, and one 
with a bunch of functions for String manipulation. The tags we cover in this book 
(which happen to be the ones you're expected to know for the exam) are for the 
generic things you're most likely to need, but it's possible that between all five 
libraries, you'll find everything you might ever need. On the next page, we'll start 
looking at what happens when the tags below aren't enough. 



The "Core" library 
General-purpose 

<c : out> 
<c : set> 
<c : remove > 
<c : catch> 



Conditional 

<c:if> 
<c:choose> 
<c : when> 
<c : otherwise> 

URL related 

<c : import > 
<c:url> 
<c:redirect> 
<c : param> 

Iteration 

<c : f orEach> 
<c : f orTokens> 



We didn't tovev- this one- it lets 
Vou iterate ovev tokens where ^0\A 
give it the delimiter. Wov-ks a lot 
like StvingTokeniz^v. We also didn't 
tovev <£:vedivett> and <£:out>, but 
that gives you a wonder-Pul extuse 
to get the JSTL dots. 



The "Formatting" library 

Internationalization 

<fmt :message> 

<fmt : setLocale> 

<f mt : bundle > 

<fmt : setBundle> 

<f mt : param> 

<fmt : requestEncoding> 

Formatting 

<fmt : timeZone> 
<fmt : setTimeZone> 
<fmt : f ormatNumber> 
<f mt : parseNumber> 
<f mt : parseDate> 



The "SQL" library 

Database access 

<sql : query> 

<sql : update> 

<sql : setDataSource> 

<sql : param> 

<sql : dateParam> 



The "XML" library 

Core XML actions 

<x:parse> 
<x : out> 
<x: set> 

XML flow control 

<x: if> 

<x : choose> 

<x : when> 

<x : otherwise> 

<x : f orEach> 

Transform actions 

<x : transf orm> 
<x : param> 




Only the "core" library is 
Q>W covered on the exam. 

the only JSTL " Dra J e don ' t go 

The rest are ^ eciah ^° ai leas t know that 
Wo them. My°^ h e % formation 
tne yre available The* m jfyQU 

reinventing the wheel. 
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Using a tag library that's NOT from the JSTL 



Creating the code that goes behind a tag (in other words, the Java code 
that's invoked when you put the tag in your JSP) isn't trivial. We have a 
whole chapter (the next one) devoted to developing your own custom 
tag handlers. But the last part of this chapter is about how to use custom 
tags. What happens, for example, if someone hands you a custom tag 
library they created for your company or project? How do you know what 
the tags are and how to use them? With JSTL, 
it's easy — the JSTL 1.1 specification documents 
each tag, including how to use each of the 
required and optional attributes. 

But not every custom tag will come so nicely 
packaged and well-documented. You have 
to know how to figure out a tag even if the 
documentation is weak or nonexistent, and, 
one more thing — you have to know how to 
deploy a custom tag library. 



Main things you have to know: 
(?) The tag name and syntax 



To use a custom library, 
you MCST read AeTLD. 

Everyfltfngyouneedto 
-know IS inhere. 



The tag has a name, obviously. In <c:set>, the tag name is set, and 
the prefix is c. You can use any prefix you want, but the name 
comes from the TLD. The syntax includes things like required 
and optional attributes, whether the tag can have a body (and 
if so, what you can put there), the type of each attribute, and 
whether the attribute can be an expression (vs. a literal String). 



(g) The library URI 



The URI is a unique identifier in the Tag Library Descriptor 
(TLD). In other words, it's a unique name for the tag library the 
TLD describes. The URI is what you put in your taglib directive. 
It's what tells the Container how to identify the TLD file within 
the web app, which the Container needs in order to map the tag 
name used in the JSP to the Java code that runs when you use 
the tag. 
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Making sense of the TIP 



The TLD describes two main things: custom tags, and EL functions. We 
used one when we made the dice rolling function in the previous chapter, 
but we had only a <function> element in the TLD. Now we have to look 

at the <tag> element, which can be more complex. Besides the function we s t\i&*2 tV*^ 

declared earlier, the TLD below describes one tag, advice. ■ <J? t^e A ■ - 

<?xml version="l . 0" encoding="ISO-8859-l" ?> ^ ^ ■ L \r\f> f^ r 

<taglib xmlns="http : // j ava . sun . com/xml/ns/ j 2ee" \£ ^ v st ' 
xmlns : xsi="http : / /www . w3 . org/ 2 001/XMLSchema- in stance" 

xsi : schemaLocation="http : // j ava . sun . com/ xml/ ns/ j 2ee/web- j sptaglibrary 2 0 . xsd" 
version="2 . 0"> ^ ^ develop 



i value)- - the 
- MANDATORY; ^ Wl ^ 



use.. 



<tlib-version>l . 2</tlib-version> *T 

<short-name>RandomTags</ short -name> 

<f unction> 

<name>rollIt</ name> 

<f unction-class>f oo . DiceRoller</ f unction-class> 

<f unction-signature>int rollDice ( ) </ f unction-signature> The EL -Pundtion 
</function> used i„ the fa^ 

<uri>randomThings</uri> ^ e unique name we 

' '» tte taglib di^W , lde a ... 

<description>random advice</description> *^ 

h ■ / RWlReP' This U Uat 7- use mside 

<name>adv ± ce</name> ^ ^ ^.^j. ^ ^ 

<tag-class>foo. AdvisorTagHandler</tag-class> s , O*^ 3 "^ . i\,t m 3 

5 so«*eo»e uses t 

<body-content>empty</body-content> De/\mrn-T\i 

<- WIRED/ This says thai the -tag 
must NOT have anything m the body. 

<attribute> ^- " ' j V** kg has attributes, the* o*e <attvibute> 

element per tag attribute is veered. 
<name>user</name> — _ 

This^says yo U /VlMST put a 
<required>true</required> N l usev " attribute in the tag. 

« " atbnWte tan V>e a 
<rtexprvalue>true</rtexprvalue> -py^s sa^s the user V^jluC d- e - 

</attribute> doe s«'t have fe. be a 

</tag> 

</taglib> 
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Using the custom Advice" tag 

The "advice" tag is a simple tag that takes one attribute — the user 
name — and prints out a piece of random advice. It's simple enough 
that it could have been just a plain old EL function (with a static 
method getAdvice(String name)), but we made it a simple tag to 
show you how it all works... 



The TLD elements for the advice tag 

<taglib . . . > 

<u r i > r andomThi ngs < / u r i > 

<tag> 

<description>random advice</ description> 
<name>advice</ name> 

<tag-class>f oo . Advisor TagHandler</ tag-class> 
<body- con ten t>empty< /body- con ten t> 



WrtWtthe3»«°taWs. 



Ly-cJr 
ributs 



<attribute> 

<name>user</name 
<jrequi^W^true</r^juirad> 
rtexprvalue>true</rtexprvalue> 

</alftribut' > 




</tag> 
</taglib I. . .> 



J SP that uses the tag 

<htmlxbody> \ 

<%@ taglib prefix="mine" uri="randomThings"%> 

Advisor Page<br^l^^^^ / — 



<mine : advice user="${userName}" /> (Assume the "usevrW attribute already e*ists.) 

t 

</body></html> I 

The TLP says the tag ta«'t have a body, so we »ade it 



I nc I v...*. " i , | ■ \ 

an e»>?ty tag (*hidh ««ear,s the tag ends w.th a slasW. 



^xf * -* ^ 9 lib direct? 
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The custom tag handler 

This simple tag handler extends SimpleTagSupport (a class you'll 
see in the next chapter), and implements two key methods: doTagQ, 
the method that does the actual work, and setUserQ, the method 
that accepts the attribute value. 



J ava class that does the tag work 



package foo; 

import j avax . servlet . j sp . JspException; _ ^ 

import j avax . servlet . j sp . tagext . SimpleTagSupport; £im^le'T3^ l *?? 0 ' r ^ Iim ?' e,,ie " 

import j ava . io . IOException; -tWm^s we need m tusto" 1 

public class AdvisorTagHandler extends SimpleTagSupport { 



private String user; 



public void doTagO throws JspException, IOException { 



get JspContext ( ) . getOut ( ) . write ( 
get JspContext ( ) . getOut ( ) . write ( 



x Hello " + user + 
"Your advice is: ' 



1 <br>" ) ; 
+ getAdvice ( ) 



) ; 



} 



public void setUser (String user) 

this . user=user ; 

} 

String getAdvice () { 

String [ ] adviceStrings = {"That 

"You should call in sick." 
int random = (int) (Math . random ( ) 
return adviceStrings [ random] ; 



t. ( J^Z ± aS 'i" ry°*r 



Tom 



color's not working for you.", 
", "You might want to rethink that haircut.' 
adviceStrings . length) ; 



Custom tag handlers don't use 
custom method names! 



*„w o lava Hass with a static method, 
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Pay attention to <rtexprvaloe> 

The <rtexprvalue> is especially important because it tells you 
whether the value of the attribute is evaluated at translation or 
runtime. If the <rtexprvalue> is false, or the <rtexprvalue> isn't 
defined, you can use only a String literal as that attribute's value! 

If you see this: 

<attribute> 

<name>rate</ name> 
<required>true</required> 
<rtexprvalue>f alse</ rtexprvalue> 

</ attribute> 



OR this: 



<attribute> 

<name>rate</ name> 



<required>true</required> .p .^y^e's no ^"ten^^tae^ 

<c " i ne deW 15 ■ faUe ' 

</attribute> w w 



Then you know THIS WONT WORK! 



<htmlxbody> 

<%@ taglib prefix="my" uri="myTags"%>__ N 

^ u 0 i TWlS „ us t NOT be a« 
te} " f> e^rf~-* 



<my :handlelt rate="${curren 

</body></html> 




O: 

You still didn't answer the question about how you know what type 
the attribute is... 

A: 

£\ We'll start with the easy one. If the <rtexprvalue> is false (or not there 
at all), then the attribute type can be ONLY a String literal. But if you can 
use an expression, then you have to hope that it's either dead obvious from 
the tag description and attribute name, OR that the developer included the 
optional <type> subelement of the <attribute> element. The <type> takes a 
fully-qualified class name for the type. Whether theTLD declares the type or 
not, the Container expects the type of the expression to match the type of 
argument in the tag handler's setter method for that attribute. In other words, 
if the tag handler has a setDog(Dog) method for the "dog" attribute, then the 
value of your expression for that attribute better evaluate to a Dog object! (Or 
something that can be implicitly assigned to a Dog reference type.) 
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<rtexprvaloe> is NOT just for EL expressions 

You can use three kinds of expressions for the value of an attribute (or tag 
body) that allows runtime expressions. 

(T) EL expressions 

<mine : advice user="$ {userName} " /> 



(g) Scripting expressions 

<mine : advice user='<%= request . getAttribute ("username") %>' /> 

\ 

It has -to be an eifv-ession, not just a stv-iplet- 
So it must have the "-" sign m there and no 
semicolon on the end- 

(3) <jsp:attribute> standard actions 

<mine : advice> 

< jsp : attribute name="user">$ {userName } </ jsp : attribute> 
</mine : advice> 

What is this?? I thought this tag didn't have a body- 



. lets you put attributes in the 



of 



BODY 
leclared 



_,sp:attribute: 
a tag, even when 
"empty" in the TLD!! 

is, mire ™ S f be only ONE W*» £ ™ t8g (as opposed to In the 
tSs a Me more about Ms on the next page... 
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What caw be in a tag body 

A tag can have a body only if the <body-content> element for this tag is 
not configured with a value of empty. The <body-content> element can 
be one of either three or four values, depending on the type of tag. 

, MOT V>a*e 3 

<body-content>empty</body-content> "The m L \ i.. 

A. NOT fca* ^TTu * CAN 

<body-content>scriptless</body-content> st<ri\>t»»^ c ' , . £l, and t»«0"> d 

•te^late te« d * 

<body-content>tagdependent</body-content> TKe "tag body is treated as plain te*t, so -the EL is 

NOT evaluated and tags/attions ave not triggered- 

<body-content>JSP</body-content> ^ ^ body Mn ^ 3^,^ ^ t3 n go inside a JSP. 

THREE ways to invoke a tag that can't have a body 

Each of these are acceptable ways to invoke a tag configured in 
the TLD with <body-content>empty</body-content>. 

0 An empty tag ^ ^ °^1U* 

<mine : advice user="$ { userName } " /> 



(2) A tag with nothing between the opening and closing tags 

<mine : advice user="$ { userName } "> </mine : advice> 

\ 

(|) A tag with only <jsp:attribute> tags between the opening and closing tags 

<mine : advice> 

< jsp: attribute name="user">$ {userName }</ jsp : attribute> 

</mine : advice> 



The <js P :attribute> tag is -the ONU/ thing you can ? » { be tween 

tSnS a *Z do 1? ^: •* a ^ ^ - <body-L;tenS 2 

<jspattr,bute> tags don't Count as "body Content". 
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The tag handler: the TLB and the JSP 

The tag handler developer creates the TLD to tell both the 
Container and the JSP developer how to use the tag. A JSP 
developer doesn't care about the <tag-class> element in 
the TLD; that's for the Container to worry about. The JSP 
developer cares most about the uri, the tag name, and the tag 
syntax. Can the tag have a body? Does this attribute have to 
be a String literal, or can it be an expression? Is this attribute 
optional? What type does the expression need to evaluate to? 

Think of the TLD as the API for custom tags. You have to 
know how to call it and what arguments it needs. 



* 5>t s 'i he TLD ' *»« 



AdvisorTagHandler class 



JSP 



that uses the tag 



void doTag() 
/ / tag logic 

} 



<html><b° d y 



<%@ 



Adv 



-cmine 



:/body> 




1 



voxd setuserfstririg u ser) 

this .us4:=user; 




<uri>randomThings</uri> 

on>random adyCce</da^cription> 
<name^ r dv^e</name> f f 
<tag-class>foo . AdvisorTagHandler</tag-class> 

<body- con tent>emDJ^< /body- con ten t> 
<attribute> X / 

<name>user</name> 

<required>true</ required> 
<rtexprvalue>true</rtexprvalue> 
</ attribute> 
</tag> 
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The taglib <ori> is just a nam e, wot a location 

The <uri> element in the TLD is a unique name for the tag library. That's it. It 
does NOT need to represent any actual location (path or URL, for example). It 
simply has to be a name — the same name you use in the taglib directive. 

"But," you're asking, "how come with the JSTL it gives the full URL to the library?" 

The taglib directive for the JSTL is: L-OO^S like a WRL- "to 

<%@ taglib prefix="c" uri="http : // java . sun . com/ jsp/ jstl/core" %> , , -tViat ViaVV e,riS 

UiWalW a* a URU 

The web Container doesn't normally try to request something from the uri in the 
taglib directive. It doesn't need to use the uri as a location 1 . If you type that as a 
URL into your browser, you'll be redirected to a different URL, one that has 
information about JSTL. The Container could care less that this particular uri 
happens to also be a valid URL (the whole "http://..." thing). It's just the 
convention Sun uses for the uri, to help ensure that it's a unique name. Su 
could have named the JSTL uri "java_foo_tags" and it would have worked in 
exactly the same way. All that matters is that the <uri> in the TLD and the uri in 
the taglib directive match! 

As a developer, though, you do want to work out a scheme to give your libraries 
unique <uri> values, because <uri> names need to be unique for any given web 
app. You can't, for example, have two TLD files in the same web app, with the 
same <uri>. So, the domain name convention is a good one, but you don't 
necessarily need to use that for all of your in-house development. 

Having said all that, there is one way in which the uri could be used as a location, 
but it's considered a really bad practice — if you don't specify a <uri> inside the 
TLD, the Container will attempt to use the uri attribute in the taglib directive as a 
path to the actual TLD. But to hard-code the location of your TLD is obviously a 
bad idea, so just pretend you don't know it's possible. 



Tfc corner looks for ai 
location of fle acftrittg Wler!_ 
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The Container builds a map 

Before JSP 2.0, the developer had to specify a mapping between the <uri> in the TLD and 
the actual location of the TLD file. So when a JSP page had a taglib directive like this: 

<%@ taglib prefix="mine" uri="randomThings"%> 

The Deployment Descriptor (web.xml) had to tell the Container where the TLD file with a 
matching <uri> was located. You did that with a <taglib> element in the DD. 

The OLD (before JSP 2.0) way to map a taglib uri to a TLD file 

<web-app> 

< j sp-config> 
<taglib> 

<taglib-uri>randomThings</ taglib-ur i> 

<taglib-location>/WEB-INF/myFunctions . tld</taglib-location> 
</taglib> 
</ j sp-config> 
</web-app> 

The NEW (JSP 2.0) way to map a taglib uri to a TLD file 

No <taglib> entry in the DD! 

The Container automatically builds a map between TLD files and <uri> 
names, so that when a JSP invokes a tag, the Container knows exactly where to find the 
TLD that describes the tag. 

How? By looking through a specific set of locations where TLDs are allowed to live. 
When you deploy a web app, as long as you put the TLD in a place the Container will 
search, the Container will find the TLD and build a map for that tag library. 

If you do specify an explicit <taglib-location> in the DD (web.xml), a JSP 2.0 Container 
will use it! In fact, when the Container begins to build the <uri>-to-TLD map, the 
Container will look first in your DD to see if you've made any <taglib> entries, and if 
you have, it'll use those to help construct the map. For the exam, you're expected to 
know about <taglib-location>, even though it's no longer required for JSP 2.0. 

So the next step is for us to see where the Container looks for TLDs, and also where it 
looks for the tag handler classes declared in the TLDs. 
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Four places the Container looks for TIPs 



The Container searches in several places to find TLD files — you 
don't need to do anything except make sure your TLDs are in one 
of the right locations. 



Tf * tiot 

,hVok « the k 9 




0 Directly inside WEB-INF 

(2) Directly inside a sub- 
directory of WEB-INF 



(D Inside the META-INF 

directory inside a JAR file 
that's inside WEB-INF/lib 

(4) Inside a sub-directory of 
META-INF inside a JAR file 
that's inside WEB-INF/lib 



/\ Java da* tt»at 



AdvisorTagHandler.class 



0^ 



^iqs shoppingTags.tld 



catalog Tags.tld 
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Whew a JSP uses more thaw owe tag library 

If you want to use more than one tag library in a JSP, do a separate taglib 
directive for each TLD. There a few issues to keep in mind... 

► Make sure the taglib uri names are unique. In other words, don't put 
in more than one directive with the same uri value. 

V Do NOT use a prefix that's on the reserved list. 
The reserved prefixes are: 

jsp: 

jspx: 

java: 

javax: 

servlet: 

sun: 

sunw: 




Write in examples of the THREE different ways to 

invoke a tag that must have an empty body. 

(Check your answers by looking back through the chapter. No, 
we're not going to tell you the page number.) 

© 



® 



® 
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fejharpen your pencil 

How the J SP, the TLD, and the 
bean attribute class relate 

Fill in the spaces based on the information that you 
can see in the TLD. Draw arrows to indicate where the 
different pieces of information are tied together. In other 
words, for each blank, show exactly where you found the 
information needed to fill in the blank. 



AdvisorTagHandler class 




<taglib . . . > 



<uri>randomThings</uri> 

<tag> 

<description>random advice</ description> 
<name>advice</ name> 

<tag-class>foo . AdvisorTagHandler</tag-class> 

<body- con ten t>empty</ body- con ten t> 

<attribute> 

<name>user</ name> 
<required>true</required> 
<rtexprvalue> </rtexprvalue> 

</attribute> 
</tag> 
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t^jharpen your pencil 



Test your Tag memory 
ANSWERS 



© Fill in the name of the optional attribute. 



<c:forEach var="movie" items="$ {movieList } ' 

$ {movie } 
</ c : f orEach> 



The attribute that «a«-es the 
loo\> dountev variable- 



vavStatus 



■"foo" > 



(2) Fill in the missing attribute name. 



<c : if 



test 



="$ {userPref==' safety' } " > 
Maybe you should just walk. . . 
</c : if > 



(D Fill in the missing attribute name. 



<c:set var="userLevel" scope="session' 



The<6:set>ta 9 -sthaveav a W Wtj» 
tou ld,Wet<, ?U tthevaW,theW 7 

^ the tav»steado*as a, attnWte- 



value 



'foo" /> 



0 Fill in the missing tag names (two different tag types), and the missing attribute name. 



<c : choose> 
<c : 



TesF 



</c 
<c : 



"${userPref == 'performance' }"> 
Now you can stop even if you <em>do</em> drive insanely fast 

> 



V/hein 



otherwise 



> 



Our brakes are the best. 



</c: 



evwse 



</ c : choose> 



The <6:otherv/ise> ta$ is optional- 
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fejharpen your pencil 

How the J SP, the TLD, and the 
bean attribute class relate 
ANSWERS 




AdvisorTagHandler class 

void doTag() { 
/ / tag logic 

void setUsejr (string user) 

this.user=user; 



i TLD file 



<uri>randomThings</uri> 





<tag> 

<description>random advioe</ description> 
<name>advice</name> 
<tag-class>foo . AdvisorTagHandler</tag-class> 

<body-content>empty</bodY-content> 

<attribute> 

<name>user</name> 
<required>true</required> 
<rtexprvalue>"tv"we</ rtexprvalue> 



</ attribute> 
</tag> 
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using JSTL 



/ V <: v *v 




Which is true about TLD files? 



□ 



A. 



TLD files may be placed in any subdirectory of WEB— INF. 



□ 



B. 



TLD files are used to configure JSP environment attributes, 
such as scripting-invalid. 



□ 



C. 



TLD files may be placed in the META— INF directory of the 



WAR file. 



□ 



D. 



TLD files can declare both Simple and Classic tags, but TLD 



files are NOT used to declare Tag Files. 



Assuming the standard JSTL prefix conventions are used, 

which JSTL tags would you use to iterate over a collection of objects? 

(Choose all that apply.) 

□ A. <x : f orEach> 

□ B. <c:iterate> 

□ C. <c:forEach> 
D. <c : f orTokens> 

□ E. <logic : iterate> 

□ F. <logic : f orEach> 
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AJSP page contains a taglib directive whose uri attribute has the 
value myTags. Which deployment descriptor element defines the 
associated TLD? 

□ A. <taglifc» 

<uri>myTags</uri> 

<location>/WEB-INF /myTags . tld</location> 
</taglik» 

□ B. <taglib> 

<uri>myTags</uri> 

<tld-location>/WEB-INF/myTags . tld</tld-location> 
</taglib> 

□ C. <taglib> 

<tld-uri>myTags</tld-uri> 

<tld-location>/WEB-INF/myTags . tld</tld-location> 
</taglib> 

□ D. <taglib> 

<t agl ib-ur i >myTags < / 1 aglib-ur i> 

<taglib-location>/WEB-INF /myTags . tld</taglib-location> 
</taglib> 



A JavaBean Person has a property called address. The value of this 
property is another JavaBean Address with the following string properties: 
streetl, street2, city, stateCode and zipCode. A controller servlet 
creates a session-scoped attribute called customer that is an instance of the 
Person bean. 

Which JSP code structures will set the city property of the customer 
attribute to the city request parameter? (Choose all that apply.) 



□ A. ${sessionScope. customer. address. city = param.city} 

B. <c:set target="${sessionScope. customer. address}" 
property="city" value="$ {param. city } " /> 

Q C. <c:set scope="session" var="${ customer. address}" 
property="city" value="$ {param. city} " /> 

D. <c:set target="${sessionScope. customer. address}" 
property="city"> 
$ {param. city} 
</c: set> 
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Which <body-content> element combinations in the TLD 
are valid for the following JSP snippet? (Choose all that apply.) 

11. <my:tagl> 

12. <my:tag2 a="47" /> 

13. <% a = 420; %> 

14. <my:tag3> 

15. value = ${a} 

16. </my:tag3> 

17. </my:tagl> 



A. tagl body-content is empty 
tag2 body-content is JSP 
tag3 body-content is scriptless 

Ll B. tagl body-content is JSP 

tag2 body-content is empty 

tag3 body-content is scriptless 

C. tagl body-content is JSP 
tag2 body-content is JSP 
tag3 body-content is JSP 

D. tagl body-content is scriptless 

tag2 body-content is JSP 
tag3 body-content is JSP 

□ E. tagl body-content is JSP 

tag2 body-content is scriptless 
tag3 body-content is scriptless 



Assuming the appropriate taglib directives, which are valid 
examples of custom tag usage? (Choose all that apply.) 

□ A. <foo:bar /> 

D B. <my : tagx/my :tag> 

□ C. <mytag value="x" /> 

□ D. <c:out value="x" /> 

E. <jsp: setProperty name="a" property="b" value="c" /> 
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Given the following scrip tlet code: 

11. <select name=' styleld' > 

12. <% BeerStyle[] styles = beerService . getStyles () ; 

13. for ( int i=0; i < styles . length; i++ ) { 

14. BeerStyle style = styles [i] ; %> 

15. <option value='<%= style. getOb jectID () %>'> 

16. <%= style. getTitle() %> 

17 . </option> 

18. <% } %> 

19. </select> 

Which JSTL code snippet produces the same result? 

A. <select name=' styleld' > 

<c : f or array= ' $ { beerService . styles } ' > 

<option value=' ${ item. object ID} ' >$ {item. title }</option> 
</c:for> 
</select> 

B. <select name=' styleld' > 

<c:forEach var=' style' items=' $ {beerService . styles} ' > 

<option value=' $ {style . objectID} ' >$ {style .title }</option> 
</c : f orEach> 
</select> 

C. <select name=' styleld' > 

<c:for var=' style' array=' $ {beerService . styles }' > 

<option value=' ${ style. objectID} ' >${ style. title }</option> 
</c: for> 
</select> 

D. <select name=' styleld' > 

<c:forEach var=' style' array=' $ {beerService . styles} ' > 

<option value=' ${ style. objectID} ' >${ style. title }</option> 
</c: for> 
</select> 
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Which is true about TLD files? 

A. TLD files may be placed in any subdirectory of WEB— INF. 



(JSP . 



r-, -Option B is invalid bedause TL-P 

LJ B. TLD files are used to configure JSP environment attributes, ^,| es £ 0 n-figure tag handlers not 
such as scripting-invalid. ^ e j s p ^iy-c^ent 

□ C. TLD files may be placed in the META-INF directory of the _ Q , £ . |$ .^y be( . ause TL p 

WAR flle - -files av-e not redogniwd in the 

META-INF o-f the WAR -file. 

D. TLD files can declare both Simple and Classic tags, but TLD 

files are NOT used to declare Tag Files. -Option P is invalid because 

Ta« Fil es way be dedlared in 



33 Files way be dedlared '» 
TLP (but it is rare). 



Assuming the standard JSTL prefix conventions are used, 

which JSTL tags would you use to iterate over a collection of objects? 

(Choose all that apply.) 

-Option A is indorredt as this is the tag 
used £or iterating ovev- )<Path expressions. 



□ A. <x : f orEach> 

□ B. <c:iterate> 
C. <c:forEach> 



-Option B is indorredt bedause 
no sudh -tag exists. 



□ D. <c : f orTokens> 



□ E. <logic : iterate> 

□ F. <logic : f orEach> 



-Option P is indorredt bedause 
this tag is used -for iterating over 
■tokens within a single string. 

-Options £ and F are indorredt 
bedause the pre-fix l |ogid' is not a 
skndard JSTL pre-fix (this pre-fix 
is typidally used by tags in the 

Jakarta Struts padkage). 
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AJSP page contains a taglib directive whose uri attribute has the (JSP x2--0 

value myTags. Which deployment descriptor element defines the 
associated TLD? 

□ A. <taglifc» 

<uri>myTags</uri> 

<location>/WEB-INF /myTags . tld</location> 
</taglib> 

□ B. <taglib> 

<uri>myTags</uri> 

<tld-location>/WEB-INF/myTags . tld</tld-location> 
</taglib> 

□ C. <taglib> 

<tld-uri>myTags</tld-uri> 

<tld-location>/WEB-INF/myTags . tld</tld-location> 
</taglib> 

<taglib> .fl^Ps F£ il 
<taglib-uri>myTags</taglib-uri> wa y ^ e | ern e*ls 

<taglib-location>/WEB-INF /myTags . tld</taglib-location> 

</taglib> 



AJavaBean Person has a property called address. The value of this (JS.TL- >*l -I ^ 

property is another JavaBean Address with the following string properties: 
streetl, street2, city, stateCode and zipCode. A controller servlet 
creates a session-scoped attribute called customer that is an instance of the 
Person bean. 

Which JSP code structures will set the city property of the customer 
attribute to the city request parameter? (Choose all that apply.) 

A. ${sessionScope. customer. address. city = param.city} 

B. <c:set target="${sessionScope. customer. address}" pev-mii assignment 

property="city" value="$ {param. city } " /> 

Q C. <c:set scope="session" var="${ customer. address}" -Of ton C is invalid 

property="city" value="$ {param. city} " /> because i\\c var attribute 

5fl D. <c:set target="${sessionScope. customer. address}" J°^ im ° ^uJ M t does it 

property="city"> ^ ^ ^ ?ro?cr bf 

$ {param. city} attribute- 
</c: set> 
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Which <body-content> element combinations in the TLD 
are valid for the following JSP snippet? (Choose all that apply.) 

11. <my:tagl> 

dudes sdviptmg Code so it must **** & 



12. <my:tag2 a="47" 

13. <% a = 420; %> 

14. <my:tag3> 

15. value = ${a} 

16. </my:tag3> 

17. </my:tagl> 



-Tag) j 




ov sdvivtiess eody- — 

sdripting tode so it »ay have e.ther JSP or 
Wiptless' body-dontent- 



□ 



B 



C 



□ D. 



2f 



A. tagl body-content is empty 
tag2 body-content is JSP 
tag3 body-content is scriptless 

tagl body-content is JSP 
tag2 body-content is empty 
tag3 body-content is scriptless 

tagl body-content is JSP 
tag2 body-content is JSP 
tag3 body-content is JSP 

tagl body-content is scriptless 

tag2 body-content is JSP 
tag3 body-content is JSP 

tagl body-content is JSP 
tag2 body-content is scriptless 
tag3 body-content is scriptless 



E. 



-Option /\ is invalid 

bedause tagl dannot 
be empty'- 



-Option P is invalid 

because tagl dannot 
be sdviptless'. 



( )SP v2- 0 sedfeon D 

Assuming the appropriate taglib directives, which are valid 
examples of custom tag usage? (Choose all that apply.) 

A. <foo:bar /> 

1^ B. <my:tagx/my:tag> 

□ C. <mytag value="x" /> -Option C is invalid bedause 

of n , . „ „ . there is no pre-Vix- 

ZJ D. <c:out value= x" /> 

CI E. <jsp: setProperty name="a" property="b" value="c" /> 

-Option B is invalid bedause this is an example o-f 
a JSP standavd adtion, not a dustom tag. 
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Given the following scrip tlet code: 

11. <select name=' styleld' > 

12. <% BeerStyle[] styles = beerService . getStyles () ; 

13. for ( int i=0; i < styles . length; i++ ) { 

14. BeerStyle style = styles [i] ; %> 

15. <option value='<%= style. getOb jectID () %>'> 

16. <%= style. getTitle() %> 

17 . </option> 

18. <% } %> 

19. </select> 

Which JSTL code snippet produces the same result? 

A. <select name=' styleld' > 

<c : f or array= ' $ { beerService . styles } ' > 

<option value=' ${ item. object ID} ' >$ {item. title }</option> 
</c:for> 

</select> _0f-tio« B is dorvefrt betause it uses -the 

0 B. <select name=' styleld' > proper JSTL -tag/attvibw-te *ar«es. 

<c:forEach var=' style' items=' $ {beerService . styles} ' > 

<option value=' $ {style . objectID} ' >$ {style .title }</option> 
</c : f orEach> 
</select> 

C. <select name=' styleld' > 

<c:for var=' style' array=' $ {beerService . styles }' > 

<option value=' ${ style. objectID} ' >${ style. title }</option> 
</c: for> 
</select> 

D. <select name=' styleld' > 

<c:forEach var=' style' array=' $ {beerService . styles} ' > 

<option value=' ${ style. objectID} ' >${ style. title }</option> 
</c: for> 
</select> 
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m tag ^eloprniint 



When even JSTL is not 
enough 



rut 




I didn't know about 
' custom tags . I thought E was 
I stuck with onjy JSTL, and nothing 
, ? in JSTl could dc what the manager 
{ wonted. Oh if only I'd known I 

could build my own... but it's too 
V Jote for me. Leor-n this and.,, 
save yourself... 



Sometimes JSTL and standard actions aren't enough. 

When you need sarneihin g cuEtom, and you don'1 wanl to go back lo EtsripiJnO;, 
you can write your own tag handlers. That way, your page designers can use 
your tag in Iheir pages, while all the hard work is done behind the scenes in 
your tag handier class. But there are three different ways lo build your own tag 
handlers, so there's a lot to learn Of the three, two were introduced with JSP 2 .0 
to make ) 




two will do what you want. Custom lag development gives yon virtually unlimited 
power, if you can learn to wield it. 
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official Sun exam objectives 



Building a Custom Tag Library 

10.1 Describe the se mantics of the "CI ass it" cu stem 
•,:ig event model when each event method 
{doStartTagO, doAfterBodyO, and doEndTagO) 
is executed, and explain what the return value 
for each event method means; and write a lag 
handler class. 

1 0.2 U s ing the PageContext AP I , write ta g h an dl er 
code to access the JSP implicit variables and 
access web application attributes. 

1 0.3 Given a scenario, write tag handler code to 
access the parent lag and an arbitrary tag 
ancestor, 

1 0.4 Describe the semantics of the "Simple" custom 
tag event model when the event method 
(doTag(J) is executed; write a tag handler 
class, and explain the constraints ore the JSP 
content within the lag. 

ID. 5 Desr-nbe the semantics of the Tag Fije rnndej- 
describe the web application structure for 
tag files; write a tag file; and explain the 
constraints en the JSP content in the body of 
the tag. 



Cov&rage Notes: 

Although objective 10 J doesn't explifUlj 
mm turn tttr lifeejcle methods msoi iattd with 
flixlfhlg \doItl)ttit\dy{) Ulld setfluihConttMtih 

ruu tint expert to see Uitm »» thr rxam! 
Etrrr/hug rnu nerd to inuw rrtttlrd to CJnuie 
togs U covered in this ihtipttr, including things 
rou might not infer fivin objeetirr 10 J. 

Ohjtftht It). 2 fPagf Context API) is covtrtd 
imh vfti briefly in this chapter, because most of 
what you need to kirnw at/nut the PageQmUxt 
APS iws iitftflitv hren everted enrhei in thf bt><>),, 
VtrlttftHj oil oj the objective is about uiittg 
PngrContext ta aectss implicit veiriablrs and 
scoped attributes, both covered in the "Script/ess 
JSP" rfiapla, although tee do pwidr a one-page 
wmmnrx again in this ilmpter. 
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custom fajj development 



I like the idea of Httvrnd reliable 
chunks, but «jsp:ineNjdo and <t:import> 
arcji't perfect. There's no standard far 
cJirectanes to put the included files in, the 
■JSP 13 hard ta read, and the fact that yog 
make flew ^eqiiwt parameters tie send 
something to the included file feel* 
wrong . 




Includes and imports can be messy 

tfcrag <jtpanelutle> or ■<*■: Linpori ^> lets you udd reusable 
chunks of content, dynamic Lilly, to your paj$cs. And you 
can evrn customize how the included liic behaves hy 
- ■ n< v, 1 1 (|in-M ] j . 1 1 -.ini-ri i-. ih.n ilir un luil< i I 111" 



Surf, il works ill i*' . Hul should you really have to create 
new nyttf.il pfiranifit-n jusi to iijvr the imluded file sitmi- 
aist< i rn izin I* ii ifomta t io[ i r 1 

Arrn'l request parameters supposed in rcprcsenl form 
data sent cfiflM M pm"l o'~ die request? While 
there might be good reason* (p WW or change request 
|).ii.ii[icn is iik your ;q>|>, iisinn than to send something to 
1 1 ii' included file isn'i Lh« tleaiiesl {tpproach 

Until JSP 2 II, ihrn: wMhri'i a adtatifUrtl wag in deplqy 
included liles you could put i lie included pi«c« jusi 
;il M nn anywhere in trie wo iijip. And flJSF wjth a bunch 
of <jsp:L]rlud<?> or <c:imporl> tags isn't the easiest 
thing to read. Wouldn't il be better if the tag itsd! told 

you something about the thing being included? Wouldn't 
il be biee to wy something like: 

<xtlogoHeader> hit <saia.vBftj> 

)rm kiww whriY thi* is going.. - 
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Tag Files: [ike ftiriwfe only better 

Willi Tag fites* yuu ean Invoke rentable content using at cttMnm tag 
iitsit'Ltd i»l (In- gairrit.- <j.ip:iiichidf > or <c;import> i Yon cat) think of Tag 
Fur* ;w .1 kh ill >jI h:milk*r Hu*"\ I Hyalite die} tel p;iu< j devektjsefi 
i reaw custom without having to write ii compBcatedjava tajr. 
handler i I ml 'live I' ilcs arc really just glorified includts. 



Simplest way to make and use a Tag File 



Take an included file (like "Header.jsp") and 
rename it with a .tag extension. 

<img src=" images /Web-3ervices . jpg" > <br> 

25? *r Srt* <hW> j * d kIT« £*T 

t be dufl^d i h ^e fi^| JSp 10 ^ 



Put the tag file ("Headerug") in a directory 
named "tags" inside the "WEB-INF' r directory. 



rename 



Header, jsp 



Put a taglib directive (with a tagdir attribute) in 
the JSP, and invoke the tag. 

<%e taglib prefix-"myT^gs " tagdir - " / WEB - IBTV tags " t> 

^htKd^-bod-^ ' X ffcf the HftftM jj . , 



otiyTags : Header /> 



Welcome to our site. 
-<: /body ><: /html :> 



^yTa^rtcadev-A 



Header, tag 




Weaoer tog 
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custom lag dweiopment 



Put how do you send it parameters? 

When we included a tile Ugtftg <Jsp;{nclude>, vw unfd (lit* <)^p:|iai'am> 
r;ip En tide Thr <ispcknelu!d*? to pass in forma tinn to Uh l Hidudecl file Cb 
rffrtsh y<mr memory *m bow ii works with <^|ri[ifludi?>: 

The old way: An included file that uses a par am 

(coming from a <jsp:param> in the calling JSP) ^ & ^ e COW^ 



■^img Erc-*i[nages/Weta-Service5 . jpg" > <tar> 

■ era ••■strcmg.-${ param .subTitle}</strong></ein> 




The old way: The JSRfwith the <jsp:include> i 
and <j Sp: param> ~7 ^ , ^ % m 

<html><bodyf ^ 

<jap:inclili4 page= "Header , jsf>"> & 

<jsp:palam naEie="subTitle" valuo="Wo take the sting out of SOAP." /> 

<br> 

Contact us ,at: $ | liiitParaiti.mjirLEiiiail | 
</body></htittl3 



The result 

Ann 



Q \C' i + f ntip-.'i'iocainostisuBUitests^tJcriaci.jsp 



i| I 5 m „ -Jul hl.Hl fol.irjrlii 



a 



BL. !■ / Thu n -fron the 
Hi- Mk- the sting out of SOAR *~ 1 * /J^N J ^ 



'*"» is in He 
Mllinj JSP 
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To a Tag File, you don't send request parameters , 
you send t ag attributes! 

You invoke a Ta^ Hie with a tags and tags can have attributes. So it's only 
natural thai t]u- Tag File developer mi^hi iwanl 10 invoke the tag with attrihutea... 
aiivihlltrs llliil ijt'l SST11 I" [he Ihg File. 

Invoking the tag from the JSP 

B&f ore (using <.jsp:param> to set a request parameter) 

■■- jsp: include page-" Header . jsp°> 

<jsp:paraio rtajne<» " subT I v.: e" v.ilLie- 'We take the sting out of SOAP. " 

<7i£ip: includes 

After (using a Tag with an attribute) 

tmy Tags : Header subTI 1 1 c= " We take the String out of SOAP" /> 



Using the attribute in the Tag File 

Before (using a requoSl par&m vatiie) 

After (using a Tag File attribute) 

<em><strong>${ SttbTi tie )•■ / s r r a ng ><> en>> <br> 



t. * = hauP TAG scope. That's right, J ust 
AM tag attributes have TAG attributes go 

the tag- Onco the tag is closed, the tag « 

™t r.1 ■■.r.oLc! 



ra ; UB you mean! to psSS ONLV *0 ^^SSSS as irvfels or JSPs to which 
nen( if J IN weft app that is a part <» trus q 

the request is forward. a ^ h ,, tes for fag Fifes is that they're scoped to 



<%e cag iih prer^vr^- wgoir-v^l*^ %> 

<h ^l><body> e tflkE the stri ng <** of SOAP" /> 

<br> TVis^ 1 iJitd! 4 

</body></htinl> 
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Aren't tag attributes 
declared in the TLP? 

With custom uigs, including the JSTL f thtt lajj attributes 
.in i k-fiiit'd in the TLD, Remember? This- is the TLD 
hum the cujitum <my:advke> tajj I'min the last chapter: 

<tag> 

«. das c r ipt io n >r andem adv i ce < / de sc r ip tion> 
< name > a dv ice < / name > 

t ag -cl asa > f a-ii . Adv i scrTag Handle r</tag-c-la J ss> 
<body-content> emp t y </taod y- conten t > 

<require<i>true</ re qui r*d> 
<3:texp rval ue>tr ae< / r texpr va 1 ua> 



</attxibute> 

<7tag> 



St 1. 1 1 it- sn ■ arc ihc thinga the developer who i-. using .1 tag 
needs (a blow Whaf T * the attribute name? In ii optkrnaj 

jib- i'ujiiiif/l^I^ i' an al I ■ it ■ a aa j ■ t ■ a a i • 1 _ 1 I j l ti j aa- miii-l al laii iiaila- M 

* '1 fLUUllblll **>ml ii i« ml a.^jn i_p.-iii.mi* vri ULifAi 11 "ja i'iij* a-t 

Slriutr literal 1 

Bt.u while you dru specify tttflofl attributes in a TLD, you 
do N"< VI specify /ngyj-fr attributes in a TLD! 

Thai means \vr slill have it problem — Im.v decs (lit- page 
developer iIttoh 1 what attributes the tag accepts and Air 
requires? Turn the page... 
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attribute directive 



Tag Files use the a ttribute directive 

There 1 * n thirty new type of directive, and it's just fur Tag 
Files. Nothing else can use ii. Ji's just likr ilic <[iitribiite> sub- 
dement in die <ts^> section ol' the TIJ) Ibr ;i custom ta^ 



Inside the Tag File 
(Heatter.taoJ 



4- 



\{ tin W a 

literal OK 



4- 



<%@ attribute naine= "subTitle" required- r txue" rtexpEvalue-"true" %> 




tinig sr .^"images/ Weh-^rvicei . jpg" > <br> 
<: emx s trong > $ { a ubTi Ife } < / s tiong > < / ewu -:b c 



Inside the JSP that 
uses the tag 



<t$ tagLib prefix="iriy/agp" tagdir="/WEB- INF/ tags" *> 
<:htmlxbody> 

<nyTags r Header subTflla-"We take the String out of SOAP" /> 

<Jor> 

Contact, us at: ? ( Ini LFaram.mai nEniai ] I 
< /body ><:/ html :- 



What happens if you 
do NOT have the 
attribute when you 
m« the tag 



-emyTags : Header /> 

"■true* 




[ c 1 ■ + ' Mto:. , /locathost-e080.'te5t5. , C<j<itactjsp 



I 



HTTP Status 500 



Type: Exceptor report 

Description. The server encountered an infernal errt* 0 lhat prevented it Irtum fulfilhig this revues; 
EK-ceptioni" 

org .apache . jasper, JasperException ; /Contact . jsp (1 r fil ) According 
to the T1D or the tag file, attribute siibTi tie is mandatory for tag 
Header 

org. apache , jasper . conpiler . Dei auitErrorflandler . j apEi toi (Def aul terror andlej: . 
java;83> 

org . apache, jasper . conpilex. ErrorDifipatcher . dispatch (KrroriJispatchex 
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When an attribute value is really big 

h&agme you have a las attribute thai might b* as long ;»•>. say, a 
paragraph. Slicking thai in ihc opening lag could gri ugly. So, /you can 
choose lo pul content in the body of the tat;. and then line that a* a kind 
of attribute. 

This time we'll take the subTide attribute out of the tag. and instead 
make h the W. of the Cn^ageHeadei';? tag. 



Inside the Tag File 
{ Header, tag) 



<invg sre" images/w&b-Set vices, jpg" > <br> 
<ecn><st- ron«]><3 sp : doBody/> /«t£otti></em> '"br:- 1 

MS fife „d ifefc [4 Kerr" 



Inside the JSP that 
uses the tag 

<4| tagllb piefnt="myTaqs" tAgdlr="/WEfi-IHF/taga" %> 
<html>-cbcKly> 

■OayTags :fleader> 

He take the sting out of SOAP. 0K r sc- it's not Jioi F <br> 

cut we'll help you get through it with the ieast<hr> 
frustration and hair loss. 




-;br> 

Contact us at: £ \ initParam.nsainEmail > 
</bc5dy>-:/htjiil> 



attr.bi.te .„ the oye^ ^ 



Buf we're bacJf fo the same problem we had before— without 
a JLD. where do you declare the body-content type? 
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tag directive ootfy-confenT 



^daring body-content for a Tag File 

The only way tti declare body-eonlrnl type lor a Tag File is 
wish snmLher new Tag File ditsectfcs**, Hit' tag directive . The 
t«i» directive is the Tiin File equivalent of llif /'n'gc directive 
in a JSP page* and it hii* a lot of the same attributes plus an 
imjfmrtsuil ojif you won't find in /m^ direi ■five— body-content. 

For a custom ta^, the <body-c oiitt'nt> element iiisidc the 
<tag> element bf a TL1J is mandatory! But ll T;<h File does not 

1i:l\'<- to declare <body-c6nient> if tin- default .n riptfen is 
Sipt^ptablft A v.'ihw nf wriptfaxs uicjius yon can't have 
scripting dement*. And scripting elniu-nis. remember, aire 
sfripttfh [<":. ,.. %>), suTiptlct rxpressioiis f<%= ... $S>), and 
Jftlivdtions i<%) ... %>). 

In | Vic I . Tiif Filr bittties *iV iiK pr a//mtW f« /ihlk scripting, 

to h's not an option, Rni you rn declare body-cunteni miim 
ill-- tag directive with Uxly-conirni attribute: if you warn bite 
i f I In- other two options, rmpty or tagdrpritdrtit. 

Inside the Tag File with a tag directive 
{'Header, tag) 



You CANNOT use s cripting 
code in the body of a Tag 
Hie tag! 

The body-content of a Tag 
File defaults to "scriptless", 
So you don't have to declare 
body-content unless you 
want one of the OTHER 
two options: "empty* 
(nothing in the tag body) or 
"iagdcpendenf (treats the 
body as plain text). 



attribute riame^f ontColor" required^'true" 
<%|a tag body- cohtcr£='-'tagdependsrit" %> „ , . i.t e ? bih te*t ^ 



img src="ima Js/Web-Si rvices.jpg" 



l»[>ijlji lUn I « II 

uses the tag 



<*§ tag Lib 
<html> 




efix~"myTagi 



tagdir-VWEB-INF/tago" 4> 

^^-^ "fitted* a detlirt ^; ,bl * ****** 

We tak^§0r sting out of SOAP-, OK, so it'ji not Jini,<br> 

but we'll help you get through it with tie least<:br> 
r'ro.Ttrat ion and ha.! r Jess. 
</myTagsLH6ad6 P > \_ ^ ^Vr* tint b«J y-t«,n-te»i » 



<br> 

Contact us at: S [initParanwmainEnrail) 
W body html > 



SOS 



Tag File locations 



custom tag development 



Where the Container looks for Tag Files 



rin Container seafcflsi fry teg files iri (bur twvrkwi, A affile 
MtJST have n TLD ii" ifi dlepjoyed m aJAft, hui if it's ptii > In ■ ■ tf} 
into the wb app (in "WEB-INF/cm*" or :b sut>^«*icfwy), ii does 
not W a TLD. 



Tkc J£p Jyj 




0 Dir«t !y insid. «ta gS 

f2) Ins id* a sub-directory of 
WE B-iNF t-injn 



Inside the METd ~J NF/rags 
directory inside a JAR file 
that's inside WEB-INF/Hb 



(a\ Inside a sub-directory of 
WETA-fNfF/tags inside a JAR 
file that's inside WEB-lNF:!ib 



IF the rag file is deployed in 
3 JAR, there MUST be a TLD 
for the tag file. 



Footftr.tog 
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nib Uijestjpns 

Does the Tag File h a ve access to the req u e i t a rtd 

reiponit implicit objects? 

A* fei! Remember, even though it's a .tag Tie, it's 
gonna end Up as part of a JSP. You can use the implicit 
request and response objects I if you do scripting^, the 
normal EL implicit objects are always there as well), and you 
have access to a JspContext as well, 

You don't have a ServletContext, though — a Tag File uses a 
JspContexi instead of a SerWetContext 



I thought -no the o p pos i Te page yog j ust laid we 
could rot do scripting in a Tag File! 



TLD entries for a Tag File describe on'y the location of the 
actual Tag File. 

Thn TLD for a Tag File (bob like ihis; 
<taglib 

< tlib -version > 1 ,0</tlib-version > 

< u ri> myTag Library </u ri > 
<tag-fite> 

<naine;>Header<:/nan!ve> 
< pat h >/ META- 1 NF/tag s^Head er.tag </path> 
</tag-file> 
</taglib> 

Notice that declaring a ^tag-fife> is quite different from 
declaring an actual <tag>. 



j\" No, that's n at exact ly what we said. You can do 
stripling in a Tag Fik r bu\ you can't do scripting inside the 
body of the tag used to invoke the Tag Fife. 



Q." Can you combine Tag Files and TLDs far custom 
tags in the same directory? 



Yes. In fact, ff you make □ TLD that references your 
Tag FrFe*. Ihe Container will consider both Tag File* and 

rnctnm tine miantlrt.riArf thi* fan m# Tl R h^rrtnrtrnri f\n fh* 

i_ u -i lw. i ■ L.Lj.r_| _i I j I ■_ I I i_ i_i hi L L I i_ -it. I -i r.- a ._ i_r u ^ u I.J v i F ^ H (iy l^llA 

same flhrojy. 



0 : 

Hold □ n — I thoug h t you said Tag F lies did n't 
have a TLD? Isn't that why you have to Use an attribute 

directive? Since you can't declare the attribute In a TLD? 

A: 

j\ Tri c k que stion . If you d eploy you r Tag F iles in a J A Fi , 
they MUST have a TLD that describes their location. But it 
doesn't describe attribute, body content, etc The 



0" 

Why did they da it this way? Wouldn't it be so 
much si mpl er to j Ust have c u stom tags a n d Ta g Fil es 
dec la red t h e sa me way in a T LD7 But NO... instead t h ey 
had tc come up with this whole other thing where you 
have to use new directives for defining the attributes 

and body-content- So, why ore tags and Tag Flies done 
differently? 

On <an& ha-nd. yat. it would have bean timplar 
if c u s t om tags and Tag Fi I es we re d eel ared in the sa m e 

...I., . . ,TI h ~..„ r H.;„~ l. ,U»r», IW. Mh**m-1 a 

wsjy, Li>njy o i i nci L|uciHLji i ji. ipii 1 1 |_ri-ci im mnjiiu rui o 

custom tag developer, sure. But Tag Files were added to the 
spec with someone else in mind— page designers. 

Tag Files grve non-Java developers a way to build custom 
tags without writing a Java class to handle the tag's 
functionality. And not having to build a TLD for the 
Tag File just makes life easier for the Tag File developer. 
(ftemember. Tag Files do need a TLD if the Tag File is 
deployed in the JAR bul a non-Java programmer might not 
In- mini] JARi anyway.) 

The bottom line; custom tags mirTf have a TLD, but Tag Files 
can declare attribute* and body -content directly inside the 
Tag File, and needTLDs only if the Tag File is in a JAR, 
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rpen your pencil 



Memorizing Tag Files 

Before we move On to a new topic, make sure 
you can write one yourself (answers are at the 
end of the chapter), 



Fill in what wouid you must put into a Tag File to declare that the Tag has one required 
attribute, named "title", that can use an EL expression as the value of the attribute, 





%> 


Fill in what would you must put into a 


Tag File to declare that the Tag must NOT have a body. 


<%& 




Draw a Tag File document 




in each of the laeaiions, L 




where the Container will 





look for Tag Files. 
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custom T3Q handlers 



When you need wore than Tag Files,,, 
Sometimes you need Java 

Tag FUrt arc line when you're doing an tetktde -when all 
you need to handle me tag you can do 1mm amthtrJSfi 

leiliillird Willi .1 fXtrilMnll .Mill ■ I L I 1 1 1 1 L ||>[j|(i|t] i i 1 1 4 ' 

direeth es .itlrlcili. Bm sonM'iimw you inn I more. Sometimes 
you m-ed good old Java code, and you dotfi wanl to do ii 

from seriplkls. siner that's whal \tm"ic Irving W nrewni In 
using tag*, 

When you nerd Javu. you need a custom tag lnvnilrr. A lag 
luifid/r>\ as opposed to n Iag_i7te, is simply a Java class that docs 
the work til' the tag. It's a littie lite an EL limction, ekcept 
much more powerful and flexible. Whet* Elf linn I ■< ■ 1 1 s are 
nothing more tlmn static methods, a tug handler class has 

iieee** let 1h R ai intuited 'he tftg bod$5 ; <tkI CWrl "he page 
eontexl so ii can u;cn scoped iillril uncs ami ihr request and 
response. 

Custom btg handlers tome in two flavors: Cfturfc and ,SVm/ii/r. 
Classic tags were all you bad in the previous version oi' jSl' 
foul with JSP 2.0. a new and much simpler model was added. 
You'll have a hard lime coming up with reasons to use 1 1 1 ■ - 

classic model Whi-t) VcHI nerd ;i rllslmu lajT handler. Iji'u :itlsr- 

the ample model (especially combined withJSTLand tag 
files) tan handle nearty anything you'd wain to do. Bui wc 

can't dump the classic model for two reasons, and these tun 
reasons are why you still have to learn it for the exam: 

1 1 |,iki' scri|jtimr, (Juv.uf utg lutti^im art nut i)un\ and yon 
might need to read and tuppon diem, even if you never 
emit one yourself. 

2.i There are (hose rare scenarios for which a classic tag 
handler in the best choice This is pretty obscure, though. So 
point # 1 k hy far the most important reason to learn about 
Claw it : ta.es. 

We'll start with the Smpti lag model first, to get warmed up. 



Tag files implement the tag 
funetionaliiy wi(i ano&er 
pfge (using JSP), 

Tag handlers implement the 
tag functionality with a 
special Java class. 

Tag handlers come in two 
flavors 1 Simple and classic. 
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Making a Simple tag handler 

Pmt the *«nptest of Simple tags* thr pna«ew ^tmpk, 

(T) Write a class that extends SimpleTagSupport 

package foo; 

import: Javajt, servlet. j sp , tage^tt , S impleTagS upport ; 

// noEfi imports needed 

public class SimpleTagTestl extends SimpleTagSupport \ 

It tag handler code here 

I 

(2) Override the doTag() method 

public void doTag() throws JspException, IOException \ 

getJEpcocitgjtt <) .getout {) .print ("This is the lamest use of a custom tag"! ; 



I 



(D Create a TLD for the tag 



***** mm * IOE«^ ( „ 



<taglib ...> 

<tlib-version>l . 2</ t lib-version > 

ur i >e impl &T aq s / ur i > 
<tag> 

<description> worst use of a custom tag</d@scription> 
<nante>simplel</ name> 

< t ag- e la ss> f oo , Simpl eTagTe s 1 1< / tag - cl as s > 
<l>«iy-con ten t>emp t y < /body - con ten t> 
</tag> 

< /tdglib> 



(4) Deploy the tag handler and TLD 

Put rhr TU1 in WfiR-INK and pttl ih<- tag handler inside 
W [; R-f NF/cla^c^ using 1 hr 1 package director) arutturcj 
of course Jn cidirr winds, lajj hmidlrr chiMCt in ihc 
Kimr phice nil other web npp Java rkisses go. 



Write a JSP that uses the tag 

<%@ taglib prefjx="myTags " uri="simpleTaga " %> 

< html >< body;- 
<myTags : simplel/> 

< /body:-*-/ html > 




Simp kTog Test 1. class 
yau are hero » 51 3 



getJspB QdyQ. invoke 



A Simple tag with a body 

IT flit- tag H££tte 9 SutfJy, the TU3 <Lk)dy-tYinifLH> need* to reffwi 1 1 i - 
and ytus need a special statement in the rfoTsigO method. 

The JSP that uses the tag 

<%B taglib prefix="myTags" uri="3 triple Tags" *> 

<'html><:body> 

Simple Tag 2: 

<wy T*g s l s iinpl e2 > ***** 
This is the body , ^ ( ^^ T ^ a 

</body>-c/htjnl> 



The tag handler class 

package foo? 

impo rt j avax . serv i est . j s p ■ Jsp EMeep t i an ; 

iinport javax. servlet * j ap .tageitt . 3 impleTag Support? 

import java.ia.IOExceptioii; 

public class sitnplBTagTesti extends 3 iinpleTag Support { 

public void cloTag i ) throws JspExcepticn, IOException | 

get JspBody ( ) , invoke < null) ; w „ ^ the ^ej 

The TLD for the tag ^ ° THEK ^ Y 

<?xml version-"1.0" encoding="*ISO-l3B55-L" t» 

<t*gliii xi!!lfiD="l"ittp = jf/jsjra , mm . com/ w£ilt\&{ j Ee*"" 

xml ns :xsl="https//'www,w3 .org/SaOi/WflLschema-instancG" 

xfcl s schemiLotrat li>si="http : / /i =ay a . sun. ciu/xml/siis/ i 2ee/w<sb-i dptayl Lbrary_2_0 .x*d" vet- 
5ion-*2.(T> 

< 1 1 ib- version >l«2</tlib- vers ton > 

< ur i > a impleTa ga< /ur i > 

<tag> 

<deseriptiGh>niatgliially better use of a sustcim tag^ /description* 



«jiame>3imple2< /rjame> 

,-no. Si m p le TagT.Ht2</ tag-, ^ ^ '^J* 



</taglib;> 



_ .l, Mh to*t a , 
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The Simple tag API 



A Simple t^u luirulli-i nus*t [mptai i the .Sintplt-'Jan tsuerfa*e+ "Hits 

c.isir-is waj in iln thai is t<> extend StrnpleTagSuppori ajid override jusl 
iln tnethod you need, doIfcgQ. Teu dnn'i kr to use SimpleTiigSuppitvi. 
Inn we reckon 9&999999% of simple t;*g developer* do. 



JepTag interface 

{javax servlet j&plagert.JspTag) 

JipTarj 




no meihods. )his interfere rs for 
1/ organs afian and poJymin'Thisrn 



Simple-Tag interface 

(ja vax servletjsp tagext. Si m p leTag ) 



I 



<*int&rf3ce>* 



Jtpteg gtfPanxitf! 



void setPsn^Jsp teg pared} 



**0«4shm the 



&i m pleTa g Su pport 

( jaw ax. servlet. jsp. lagext .SimpleTagSupport) 

! 



SimpteTagSupport 



void doTag() 

JspTsg fndAneestofWithClass (JapTa-g, Class f 
J*pFragmant getJspBodyl) 
JipCantHjit net JspCprcteifl ( 

JspTag getPBnent(|i 
void setJspBodyi JspFragnwnt) 
void setJapCofiteirttJapConleJt) 
void setParentJJspTag parents 
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Simpte Tag handier iifecyeie 



The life of a Simple tag handler 

When bJ&P invoke* n tag, a new instance of tin* uijt taukUet 1 dass is 
bjstemtated, two or mote methods are railed cai the handler, and when 
ill'- doT^gQ method uuiJipltMfs, ih*' handler Bbjeel jtoc<; ;iw;»y. (hi other 
words, these handler objects arc «o< reused 



Tag Handler Object 



Containerl 
I 



! Load class 



wit » ■ 



SimpIsH^ndlErdaSS 

i 

Instantiate class (no-arg constructor runs). 



Call the Mt JsptonteiftfJspCc-ntext) mcthad. 




If the tag is nested (invoked from within another 
tag), cafJ the setParent(Js pTogJ method. 



You wife -these ir your t\is&- 

If the tog has at tribjies. caN attribute setters. 




If the tag is NOT declared ta have a * body- 
contend of Empty, ^ND the tag has a body, call 
the setJspBodytTspFragtnent) method- 



will ALWftVS wtrride 
Call The doTagO method 




«™te*. the s ,-t^ U eiet, 
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BE the Container 

Look af each of fhe TLlYjSP pairs- 
Assume tknt lb.' fng handler prints th* 1 

budy or the tag. 1 hen answer thy 
fo! J owing <piesfions about mh 
t>nt: H .. what's the result? If it 
works, what prints out? Which 
methods in the custom tag class 



<tag> 

<descript ion><7descriptiori> 
<namt! >a itnjjle< /name > 

<tag-cla55>£op»SimpleTaciTe5t<-/t.ag-cltis5> 
< bod y-cufl ten t >emp t y< / budy-cu n te ft t > 
</tag> 



Simple Tag: 
<myTags :s implex 

This is the body of the tag 



What do you see in the browser? 



If it works, which SimpleTag 1 if at ye!* methods are called in the handler? 

Q void seUspBtfyQ Q ™ri setJspCctiiextO Q raitf seiPsrenff; 



<Ltag> Simple Tag: 

^deEcriptionxi/deecription.^ ^myTage t simple > 

<rame>a implex /jiiim.e> 3 H 2 * 3 > 

^bridy-coTi ten t>sdript 3 ess <: /body-content > 
</tag> 



What do you see in the browser? 



If it works, which SimpleTag lifecycle methods are called in the handler? 

..jvcrdtfcTaEffl □jspfiflijelflBentf) □ mid setJspBcdtf) □ void set JspCwtaftO 
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BE the Container 




(Y) < C £iq :> 

<de^rriptioci5</descript i on- 
<name>simple<:/name> 

<tag-cia55>iDO.SimpieTagTe5t </tag-cla5 5> 
<bQdy-content >empty< /body-content > 

What da you see in the browser? 

It doeint *ork betake it 1% ib.p?o«d ie 'hive 3n empty b«dy 

or g ■ apache . jasper . JasperExcept ion : /simpleTagl . j sp ( 1 , 76) 
According to TLDi tag TtiyTags: simple must be empty i but is not 



Simple Tag: 
■OnyTays :simple> 

This is the body of the tag 
< / myTags ; 5 imp! e> 



fJone, became it 



If it works, which SimpleTag lifecycte methods are called in the handler? doe^M: mvIc 



e c ag : ' 

-:de scri pt ion > < / de s cr ipt ian> 
< name > s imp le < f name > 
<tag-clas5>f 00 • Simple' 
<body-content >scriptle£; 

What do you see in th* browser? 



ag-cl ass--' 
-content :- 



Simple Tag: 
<myTags:simpie> 

< /myTags ; simple > 




3Sn ***** 



was 



If it works, which SimpleTag lifecycte methods ar* called in the handler? 
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What if the tag body uses an expression? 

Imagine fQH ba*¥ a tutf with a body thnl tm 1 * an l\L expfftU&III l'i>r iin attribute, N(>w 
imagine tli iii i!ic .nii ilitir^ doesn't exisl at the rime yr»n invoke the- lag! In. ott er words; 
tag hoil; depends uti iln j lap hwidhr to set ibe Jiiiiiliiiu'. |~hr example doe$n 1 da uhvilnim; 
very useful, but here to ihow you how ii wotfoi in preparation iV»r a bigijrr example, 



The JSP tag invocation 

<myTags : simple3> 

Message is; ?{mas 
</rnyTags: simpie3> 



sago) 



The tag handler doTagf) method 

public void doTagt) throvfs JspExceptiarLr^IOExeeptlon ( 

getJ"spCon text <), s etAttr ±bu te ( "mes s age , "Wear sunscreen."} ,* 

getJspBody (). invoke {null > ; \. 

TW^^^***** 



Imagine you have a tag that looks like this; 

<table> 

<myTtigs : simple4> 

<trxtd>S [movie f</tdx/tr> 
- /myTags :siraple4> 

■^f'tdirltt--' 

imagine that the tag handler has access to an 
array of String movie names, and you want to 
print one row for each movie name in the array. 
In Lhe browser, you II zee something I 



Write the- tag handler doTagf) 
method to support that goal 



public vqid ctoTagO throws JspExceptign, 

luException i 



Mnn-Hoon Wedding 
Saved! 

Fahrenheit <J/11 
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A tag with dynamic row data: iterating the body 

Jn this exwnpte, the EL cxpre»*ion bi the body of the uij? repreneitt* a single value in 
a i ollection, m4 the go*l is k> htave rh<- tag generate one row for each riemeni in the 
roller moil It's simp!, the doTagQ mrtfind simpi) doei iln- woris in h lonjx bjwoking 
the body on each ftcrarion of the loop; 



The JSP tag invocation 

>l , *iit at V* **** 

, r ( I ] Slmovia} / 1 \ ••"/ tt> S ar( l ^ " ll< ° 

</myTag's:simple4> 143 ' 

< /table • 



The tag handler doTag() method 

String!] movieo = (^Monsoon Wedding", "Saved!", "Fahrenheit 9/ll"|j 

public vuid daTagU throws JsLitxccptiou, iOExeeptlon \ -fcfct att"^*te 

foriint 1 - 0;: i '< movies . J<=ngth; HO j £ d*" 0 * ' T 

ge tJapContewt j ) . setAt tribute { "movie " , movies [ i] ) ; 

getJspBody () . invoke (null f t 

\ 



JSP 



• myTags : simple^ 
<tr><td> 

$ ,;ni^.irii=f ^ 

</td>^/tr> 
■i/myTag*; simple^ 




£or{int i = D; i < movies. length; i+-) \ 
nrit jHriCnntexr. ( ) .net At tribute f^Tiinvip."; 
ytLJtpQL'iJy (J .iiivuka (null) ; 



1 to^i&fepfe 
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A Simple tag with an attribute 

If tbe tag m.T<l«. an attribute, y m dacriajM ti in tbc TU3, and pinvidf 
a bean-style tetter method m the tag handler claw for each attribute, 
II ilif uift invocation iiuliid<"; ;iiirilnnrs, iIii l Cttiiminr r invokes ;t 
setter method for each attribute, 



custom lag development 



The JSP tag invocation 



<table> 

< myTa-gs : s iraple 5 movieLis " $ ( raovieCol lec tion } " ■ 

<tr> 

< td>$ f movie . name J 

</ti> 
<AnyTagj>:Eimple5> 
</table> 



The tag handler class 

public class SimpleTagT 

private Utsi movicLi 




Support i 



public void settfcvielist (List movieList) 
this .injovieLi3t=^iovieList; 

) 



'J tl 



public void doTagf) tf -owa JspExceptior,, IOEx'jeptlon i 
Iterator i = movitfJ-St. iterator <) J 
l 

Movie) l.next t) : 
5et At tribute r"niovie" ( movie} ; 



while (i.haENext ( t > 
vie tiujvle = 
get JspContext 



> 



get JspBocfy () -i i voice ( null} i 



The TLD for the tag 



■ede s cr ipt ion> t a fc 



■-body-content 
^attributes 



^ P* itfa-iWe The „«4l, J 7 

ik, TV rw , attl *'** »*»( m 
the I L£) Uinuj ±L, <><" „ r 



an attribute and iterates over body</descripticn> 
<namos imple5< / n Ae> 

<tag-class>foo lipleTagTest 5</ tag-claas> 
iptless O'body-content* 

<n ame>mov ielil s t </ name > 
<required>true</ required> 
< r taxprva luo>tm« </ r texp rva lue> 
</attribute> 

</tag> 
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What exactly ]S a JspFragwewt? 

AJfcpBrigmerii is am object that wpMsseistsJSF cod*; Jts sole 
pui |)i.m iss 1 1 1 ■ ■ 11 111 he iiv, i ■ k ■ -« I- In c ■ 1 1 1 1 - 1 winvU, u s lomethtng 
that'* meanl to run ;«ul generate nuf/>ui- The body ■• ■ I ;i tag dial 
invoke* a simple tag handler is encapsulated in die Jspl-Vajiinr-iH 
abject, then sent lo the tag handler in the MjJspBodyQ method. 

The crucial thing you musl remember about JspFragmeiil is that it 
must NOT contain any scripting clement*! It ran rmimin template 
fcgxtj standard and custom action!!, and KJL expressions, but tin 
scripllets, declarations, or Mnptins" expressions. 

One cool tiling is I lint since it's, an object, you fan oven pa^ 1 1 ■ ■ 
fragment wound to other helper object* And (Aom object*, in 
turn, can gel toforrnation from it l>y invoicing the JspFragment^ 
utttn method gr |JspConim(), And of course prtGC yOtttye p*< 8 
r/nnicxi, ynu trail i»sk lor attributes. No die gciJspContcxti method 
is realty a way Ihr the tap body to gel information to other objects. 

Most or the time, though, you'll use JspFragttient simply to output 
die Ihh|\ nt i lie- tag ii.i the response, \rm might, hnivcwr, \v;uii 
in gel ;M < ess to i he oMtttts at the body. Notice that JspFrafriin'iit 
doesn't have an access method like getCoutcutsQ or gctHudy(J. 
You can ttTif* the body to something. but ynti can't directly gft the 
body, It yon tin watn access tn the body, you ran use the argument 
to llle imoke mt'thod lo (mi-, iii .1 j;iVa.io. Writer, tfieil Use 



For the ejtiini, and real life, thin is probuhh idl you will ev*-r tu*ed 
to know about d)c detail* of Jspfragtnent, w we Won*! spend any 
mute lime on il in the book. 




toi,-ke*vti- 



output. P»»» - - if vo u 

sssBgaSsssS! 

g^SU — — * 
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custom fag development 

SkipPageException: stops processing the page... 

[ntagme you're in ji page that invoke the tag, awl the rag depend* on specific request 
attribute! (thai it gets from theJspGantexi available to the rag handlm. 

Now imagine ih.' tag i-iin'1 find the atti ilnm-s it mid*, and that tin- tag know? the rwl 
[>f the |mgt- will never work if tin- tag can't succeed; What do jppti do? Von could liavt- 
the tag llinw aJjpException, and that would kill the payr,,. Unl what if itV only the 
nvrf of the pagr dial wou'l wrtrk!' In oilier words, what if you still want ihe/ir.i/ part qf 
the pEigc — the pan of the page dial's evaluated befoir the tag invocation — to still appcaT 
as tilt' response, hut you don't want the respmisr lo includY anything still left to Ijl* 
piTH-pswd gffct the tag throws aw raceptiwi? 

-N" |j[nMrin [ 1 1 . : i " . -.. -ikipl'.iLM fAi i ■ ] 1 1 1 am-. 



The tag handler doTag(> method 

public void doTagO throws JspException , IOException [ 

qetJapecntext f) .getout (}. pii:it ("Massage from within dofag ( J .<br>") i 
getJspC&ntext {) .get Out () .print ("About to throw a SkipPageException" ) ; 
If (thirigsDuntWork) I 

throw new SkipPageException ( ) : 



The JSP that invokes the tag 



tacjlih pr6siix= w jtiyTaqs" uri^siifipleTacjs* 
<htmi><body> 

About to invoke a tag that throws SkipPageException <br> 
OiyTags : s implefe/> J"Wc kindled - 

<br>Back in the page after invoking the tag. above ({!nsi \JHrom s SkiffajeE^pto 0 " 

t/bcdyx/htmlJ- 



the doTajO mttW 



Wh^t b the result 1? the ^Jh^-sDDnfWo^ te*t is true? 
Fill in what you'll see in the browser: 
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the SkipPageException 



SkipPageException shows everything 
up to the point of the exception 

Everything in the doTncpi method up Ed the point ol the SkipftigeExccplion 
still shows up in the response. Bill utkr the exception, anything itill It'll in 

cither the ulu i>r the pagt won't be evrtluau-cL 



In the JSP 



<%G taglib prefix="[uyTags'' Qri="simpleTags ,T %> 
■ch.tml^<boiay> 

About to invoke a tag that throws SkipPageExctption <br> 
<myTaga^ simple 6 /> 




public void doTa.q() throws JupExcapticn, LOExcoptlon | 

(get JspContext (1 .getOut <} .print ("Message from within doTag ( ) . -^br >" ) ; 
"[get Japcontext !) ,ge tout () .print ("About to threw a SkipPaqeExcieptluti*') ; 
if (thinqsDoicitWGrk) ( 

throw new SkipPageExccption ( J ; 



1 
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custom tag development 



Put what happens when the tag is 
invoked from an included page? 




rpen your pencil Look al the code below ard f ^ me out what P nnts when y° u 

X 7 \ bring up PageA. 

Hint: look in the API fcrjavax.setvlet.jsp.SkipPageExeeption, 

Fill in what you'll see in the browser: 









| « * 1 ft B 6-B ^ jB htip.^'iocaihost'&a&a.'test^PaoeA is,p 









PageA JSP that includes PageB 

■ihtmlxbody.* 

This la page <AJ that includes another page (B) . <br> 
O^ing the; include now:<tar:- 
vjap: include page^badTag Include, jap" /s> 
<br>Baclt in page A after the include... 
-r/bodyWhUnl-- 



PageB <the included file) JSP that invokes the bad tag 

<*S caglib prsCx= w enyTaga" uri="simpleT.ags" ft> 

This is page B that invokes the tag that thrc-ws S IcipPage Except ion ■ 
Invoking the tag nn?v:<br> 
< my Tag s : s imp 1 e 6 1 > 

<br>Still In page B after the tag invention 



The tag handler doTag() method 

public void doTagjt throws JspEXceptiotv, lOExcept jofi I 

get JspContext 0 .getOut () .print ("Message from within doTag () . <rbf>" j 
getJspCdntestf) .ijetOutO -print ("About, to throw ^ SkipPageEjtcept ion" ) ; 
throw new SJtipPageException (j ; 
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SkipPageException behavior 



SkipPageExceptron stops only the page 
that directly invoked the tag 

If the |>.i£H' ilt;n invokes ifu- tag was Included from »om* ptber paff* j . iwih (In 1 page 
ihm invokes ilic lug slops processing! The origin;)! page lhai diet the iiu hide kcrps 
going alter the Skip lr*E» e^i- Exception, 



jiujn («Kir<*fl c e|Mn Horn summer tu k+i 





This is pnjie (At I hit I include another page IB I. 
Mdinjj, lln? Siu'ludt' linn : 

This is prtjjc B lh:it ittvuki*s the lag (hat ilmius 
Skipl'u^cI'AL'cptitHi. Invoking Liu' tn£ no" : 

Message from williitt tloTagt l. , 

A hunt i» ihrow a Ship ]*»ge Except inn didn't- 

11 »c k in punt' 'V "Iter ll"' iliilude... ^ 




Page A JSP that includes PageB 

This is page (ft) that includes another page (B) . <br> 
Doing the include now: l - E> 

<j£ip: include page=""b3d1aglnclude. jsp" /> 
<:br>Bac]£ In page A after the include. . , 

< /My «, tlM1; . wtrt ^ fc m to ^ ^ „ ^ 

included file) JSP that invokes the bad tag 

tag lib pi"cfix-":ny r Tag3" uui-"i irapleTaga" 
This is page B that invokes the tag that throws SkipPageException . 
Invoking the tag now^bi"' 

<myTagsisimpli;$/> 



Wr>5till in p*ff* S *ft«? th# t*j anTOCwtlcnTrs 



The tag handler doTag() method 



public void doTagO throws. JapSxceptian, lOException I 

getJspCantext (> .getOut 0 .print ("Message from within daTag ( ] , <br >" ] ; 
getJspContext (> .get Out I) .prijnt ( T Ahout to throw a SJcipl'act&Exception") ; 
throw new SkipPageExeeption f > f ^ ^ ^ ^ n, ^ w ft iceef* 
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custom tag 



^£ What h appe n s to □ S irri p! eTa g 
handler af let it completes doTdigl)? 
Does the Container keep it around 
and reuse it? 

A: 

No. SimpleTag handlers 
are never reused! Each tag handler 
instance takes care of a single 
invocation. So you neve* have to 
worry, for exam file, liial instance 
variables in a SimpleTag handler 
won't have the correct initial values, 
ASimpleTag handler object witl 
always be initialized before any of its 
methods are called. 

0* 

Do the attribute methods 
in a SimpfeTag handler have to be 
of a type that can be automatically 
converted to and from a String? In 
other Word Si, are you stuck with just 
primitives and String; values? 

A: 

£\ Weren't you paying attention 
a few pages back? The attribute we 
V.-T.1 [li Th-j iinipk'T.Kj hdndlei was 
an Array Li st of movies. So that would 
t:o "no" to ansiwor your quettion. 
But... if the attribute iwhich yom can 
think of as a property if you think of 
the SimpleTag handler as a beanl is 
NOT a String or primitive, then the 
< rtexp rvalue;- value in the TLD had 
better be set to true. Because that's 



the only way you can set an attribute 
Value for sonvpthino lhal Can't be 
expressed as a String in the tag. In 
other words, you can't send a Dog into 
the tag if you're forced to represent 
the Dog a* a String literal. But if you 
tan use an expression for the value 
of the attribute, then that expression 
can eVrflu<)[4H [o whatever t)b|f< I lyjje 
you need to match the argument to 
the handler's corresponding setter 
method. 



O: 

In a SimpleTag handler, if the 

tag j s d eel a red to havea body but j t 
is invoked using an empty tag (since 
there's no Way to say that a body Is 
required), is the seUspBodyd itill 
invoked? 

A: 

f\* NolThe setJspBodyf.) is 
invoiced ONLY if these two tilings are 

true: 

3) The tag is NOT d ec lared in the TLD 
to have an empty body. 

2 ) Th e tag is invoked wit h a body, 

flnil nisain ihal if rln lag is 
dedared rn have a non-empty Lmriy, 
the selJspBodyi) method will not be 
called if the tag is invoked in either of 
these two ways: 

<foo:bar/> (empty tag) 

■cfoo:barx/foo:bari {no body). 
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Simple Tsg bullet points 



BULLET POINTS 



■ Tag Rles implemeni lag foncfionalily usJns s qsqb. 
while lag handler implement tag functionality using 
a Java tag hand'er class. 

■ Tag handlers oome in two lypes: Classic and 
Simple (Simple lags and Tag Files we<e addttl in 
JSP 2.0) 

■ To make a Simple tag handler, extend 
SimplelagSupport (which implements the 
SlmpleTag interface) 

■ To deploy a Simple tag handler, you must create a 
TLD thai describes the rag using the same <tag> 
element used by JSTL and olher custom tag 
libraries. 

■ To rise a Simple lag with a body, make sure the TLD 
<tag> for this tag does not declare <bndy-content> 
emply Then call gerJspBodyfl. invoke^ to cause 



i he SmipleTagSupport class includes 
implementation melhods for everyttiing in the 
SimpieTag interface, plus three convenience 
methods including geLspBodyfl, which you can 
use to get access to the contents of the body of the 



■ The Simple tag lifeeyde: Simple lags are never 
reused by the Container, so each ins a lag is 
invoked, the teg handler is instanced, and its 
seUspConiextO method is invoked. If the tag is 
railed from wilhin another tag. the setParentt) 
method is called. If the tag is invoked with attributes, 
a bean -style setter mettiod is invoked for each 
attribute ff the tag is invoked with a body (assuming 
its TLD does NOT declare tt to have an empty body), 
the setJspBody() method is invoked. Finally. Hie 
doTagO method is invoked, and when it completes, 
the tag handler instance is destroyed. 

* The setJspBodyQ method will be invoked ONLY 
it the tsg is actually called with a body If the tag 

is invoked without a body, either with an empty lag 



<my.1fl<ji'> cr wtb nothing between Che opening and 
dosing tags <my:tag><fmy:lag>, the setJspBodyf) 
method will NOT be called. Remember, rf the lag has 
a body, the TLD must reflect that, and ihe <body- 
conlent> must not have a value of "empty" 

The Simple lag's doTagf) method can set an 
attribute used by the body of the tag, by calling 
getJspContextj) setAttributeij followed by 
geUspBodyij.invokefl 

The doTagf) method declares a JspException 
and an SOExceptiort, so you can wrile to the 
JspWrstei without wrapping il in a try/caich 

You ran iterate over Itie body of a Simple tag by 
invoking the body (getfspBodyO invoked) "» a l»P- 

If me tag has an attribute, declare the attribute in 
ihe TLD using an <anribute> element, and provide 

ban-Style setter method in the tag handler 
class. When the tag is invoked, the setter method 
will be railed before doTag(). 

ThegetlspBodyl) method returns a JspFragment, 
Which tias two method- imrake(java.lQ.Wriler| find 
geUspContentj) that returns a JspContext the tag 
handler can use to get access to the PageContexl 
API (to get access to implicit variables and scoped 
attributes). 

Passing null In inverted writes ttw fivalufStfirt hndy 
lo the response output, but you can pass anolber 
Wilter in if you warii direct access to the body 
contents. 

Throw a SkipPageException if you want the current 
page to stop processing. If the page thai invoked the 
tag was included from another page, the including 
page keeps going even though the included page 
stops processing from Ihe moment the exception is 
thrown. 
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custom lag development 



Ifs just wonderful 
that JSP spec designers gave 
us Simple Tags and Tag Files, but, 
um. they waited until AFTER my 
company wrote about 10 milJien 
custom tags using the 
Classic model... 



0 

a 



You still have to know about 
Classic tag handlers 

Vbu might get lltcky Miiyhc the plaer you work 
i> starting out with JSP 2.n. and can use Tag 
Files and SimpleTag handlers fjruffl she start. 

I tun i ", , i. ,, 7 happen, 

Bm ii probably won't, Cfcufcea are, yovfre 
working [or will work in the I'uiuiri somewhere 
lhal's been lining JSPs lioec tin* pic-Li.4 1 days, 
using thr Olassk Lug model Lbr writing Ctta'tffliM 
liiiinlli i> 

Viiu pmbably need to at least be able lo t rad the 

5 ■ e i Q&i fat a CUihsr 1 lag handler, 'Sou miglil 

be tailed itii lit maintain or n t;» tin a ClaMik 
tag handler class. 

Bill even il you don't ever have tn read or 
write a Classic tau; handler, they're still covered 
(vcrv lightlvi by run 1 the i-xam objectives. He 
grateful bri the previous" vetri I ihe e\ 

"h h 1 1 J illiujhl have seen al leii^l seven Of eighl 

Classic tag handler quettiotu on ihe exam. 
Today, exam eandidates will sec only a couple 
ol questions an Classic tag handler*. 
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Tag 



Tag handler API 

Everything in a 
grey box i* From Ste 
original (Classic) tag 
aitxid tnir custom lag 
I j: i [idlers. 



JspTag interface 



JspTag 



no r.'v; interface is (01 

// organization md polymorphism 



SimpieTag interface 



ag interface 



JspTag gefParenffl 
umi seblspBodrfJspFnagment) 
vox} seUspContexM JspContext) 
vox) sftParentiJspfeg) 



Tag 



M cto&tfTagfl 
fag y^Pdwifi? 

rati selPage CofiSextfPageContoirll 
void sefParenfj'TaaJ 





J 



SimpleTagSupport class tterationTag interface 



SimpleTagSupport 



void (kTagp 

JspTag nndArtes'nr'.YilhDaL!; ( 

JssTag, Classl 

J 5 f:~iiiQi-t>:il HeUfiDBcxiyd 
JspConlext gel JspCiinte*t< | 
JspTag gslPa»nt() 
vc«d aaUapBudyfJapFregmDnl) 
■jod SE;..FpCcrLe)it(J5pCorite'li1) 
iclTarentl-JspTog) 



— T — 

Body Tag interface 



«inJirfacp>> 
BodyTag 



vwcH dolrvtBodyi) 



Tb fag KantHer API 
ks five interfaces and 
toe support classes. 

Tare's virtually NO 
reason to implement the 
inter-faces directly, so 
you'll probably always 
extend a support class. 



TagSupport class 



TagSuppart 



•itdoAfieiftjdyf) 
rt doStartTag! > 

rl^ rlr-iFnriTanf i 

'ucxd setPag«Caril«x1(PageCQfi!ett) 
// ma* (Mrihed* 



\BodyTagSupport class 

,i i , 



Bod yTag Support 



int dbStarflegO 

BodyConienl getBodyCornen((J 
void dolnitBodyil 

void selBodyCoritert^BodyCanlflnt) 
U mora mslhods 
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A very small Classic tag handler 

This example w W bask thai it's not mtit li different fiwn a SinipfeTag handl-i '■- 
deTagfJ ini'diiul. In feci the tfifferaicea worn become painful until von iry m 
proem a [ay wild a txidy [bill you'll jusl hzVti to wail fur Ihiit), 

A JSP that invokes a Classic tag 

-c*@ taglib prefix="mine" uri="KathyClas5icTags" %> 
<htifdxbocJy> 

Cl assic Tag One;<br> ^ uS4S a Qa^l 

<mine: classicOne /> ' .f 3 M ^ fa 0£P, it 

</b<tfy>< /html > ^ otw fcj m wtiW 

The TLD <tag> element for the Classic tag 

<tag> 

<description>ludicrous use of a Classic tag< /description 

<name>>clacsicDrie-:/riame> k, fa t <ts^> 

<tag-class>foG.Cla5.«icl*./'tag-cIass> TVrtft |tf *W to ^ t,voW ^7 i S5 y,-^ kr.c* 

<body^ontent«mpty< /body-content > i l, 3 CU*^ k*i ■ nte ^ s « 



The Classic tag handler 



package foo; 

import javax.5ervlet.j5p.'; , ' rt ^tir^t^S 

import javax.servlet.jsp.t.iqext.'f fW<C*fe«fr*[ WSrfj*5 tj „ ^Ve o«ceri<l"^ 

- /- gs3aess3fc5P 

public rla?5 Cla55i(rl extends rjSi mprvr t" r ' 

public lilt uajS tit t Tiy ( ) ti'iiuWa JsjpExtjuptiOii { . _ '^*^Spts3fi/ fTnc £i*npi^Tan 

JsfiSrltsS Out = pageConteKt.getQllt 0 J ^ 

out. pnntln ["classic tag output-); 3«^pC^W0 c , 



> catch ( luExccEJtiotL t .xt | 

throw new JapException | " IOException- " + ex. toString ( I) ; 

Here * ^ yfe , fafafa 

return SKIP_BODi r *e u*i d <fi | 3rt i hf ' 

A; yfc h « to «W» ■»« »"t t» tell WE*efW 

fa Caftlamn- wKat do «e*t 
Muth MM o« tifl* "F 
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Classic 



A Classic tag handler with TWO methods 

This example gverrwlea both ih<- (toStwtTsgf) ai«J doEndTagQ methods, shhottfth 
if could accomplish die siiuic innjmi a] I within doStariTagl). The poini of 
doEndTagQ is tbsu it's called (In* body Sa evaluated. We doit'l show the TLD 
here; because it's virtually identical 10 the previous one, except for some of the 
jumic^ , The lag is declared to have nc attributes, mid an empty body. 

A JSP that invokes a Classic tag 

<S@ taglib prefix="mine" uri^KathyClassicTags'* S> 
<html ><body> 

Classic Tag Twa:<br> 

<m±ne: class icTWO /> 

The Classic tag handler se ^t^5 WoF " 

public c&4U$S Claasic2 extends Tag Support I 
JspWriter out; 

public iti't doStantTagi ) throws JspException I 
out = pageContext .getOut () ; 
try [ 

out .println fin doStart't'.ag () ") t 
\ catch ( lOExcept ion ex) t 

throw new JspfcxceptionflQExdepticin- w + ex. centring ( )) ,• 

Luo. skip Boraf^S 



I 



public int doEndTagO throifa JspException | 
try j 

out, print In f in doEndTag ( } "J t 

i catch [IQExceptic-r. 68) [ 

ffiiow new JspExceptlonflOExeeption- " + ex. siosxringo I ,■ 

I 

return EVAL PAGE ; £ Tk, z ■!« it . , 



Classic Tag Two: 

in doStffltTagO in duEndTagO 
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When a tag has a body : comparing Simple vs, Classic 

Nuu it mutts to ltK>k difVn'r.-iii Irani SimpleTiig Ki-inmilx-r, Si'mpN-'laj/ bodies 
arcevfiluated when [aad tfj yon vcani l>y calling ttrverlteQ nn diejeplfoigjiieiil thai 
c"cik - :i|>sLi |:i h-h (he IkxIv/, Btii in Classic tags, the body ix tv tthtitt* d m between ike daSiurtTagfj 
and doEndTagf) metkctUi Both <>l the examples lirltm bscve lhr exaci same hrhiivinr. 

The JSP that uses the tag 

taglib prefix^myTags" uri="myTags" %> 
<htmlxbody> 

■Cray Tags : simplcBody> 
This is the body 
</myTags : simpleBody> 
<c/bodyx:/titml> 



A Simplc Tag handler class 

// package- and import b 

public cla33 Si-mpleTagTest extends SimpleTagSupport { 

public void duTeg ( > throws JspExc-Bption, lOExcBption [ 
get JspContext ( ) .-gertoutf) . print {"'Before body.'') ; 
getJspBody [) . invoke (null) ; 4— Ttm Uwt* tke body b> be ewluited 

getJspContext {) .getout () .print ("After body."); 



A Classic tag handler that does the same thing 

// package and imports 

public class CUssicTeSL extends TagSOpporL \ 
JspWriter* outi 

public itiL dioSta.rtTa.cj 0 Lhrc-Wd JspExceptiort { 
out - pageContext .getOut I) ; 
try | 

out, println ("Before body."); 
) catch ( loExcepti on exf | 

throw new JspExceptiorH "loExceptiun- " + ex. toString ( ) ) ; 

! 

■v.- ;.i r, EVAL_BODY_INCHJDE; { — - fhtjS is. whit «<j?s He body to be 
I evaluated «•■ a Classic laj k>a*dlev ' 

public int doEndTagO throws JspException I 
try \ 

out. println ("After body."); 
) catch ( I9Exce.pt ion exh I 

throw new JspExcept ion I "iQEjccspL inn- M + ex. tostring ( I ) t 

I 

return EVAL_PAGE; 

j 
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iterating with Classic tags? 



But haw do you ioop over the 
bejy? It looks like daMortTogQ 
col fed too GOrly. and doEndTcgQ is Too 
late, and I don't have any way ts keep 
re-invoking the body evaluation... 




// package and isnportB 

public class simpleTsgTHSt ext&ndi 3 imp I sTag support ( 
public void doTagl) thxfws JspException, IQExcepti on 
forflnt 1 = 0; i < 3, L*^) I 
get JspBody ( } , invoke (null) r 

I 2* 




Classic tag 

// package! and imports 

public class ClssslcTest extends TaqSuppcjrt [ 

public int doStartTag <) throws JspEscepSion ( 
return £VAL_BOL>Y_INCLUDE; 

M *»Jt.i*. HP tie body, $ ±i« 
IM ^d °+ IN J ^thod Lte d.TojO? 



pubiic int doEndTagO throws JsjpExccption | 
return EVA1 PAGE; 
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Classic tags have a different lifecycle 



>.iiis|ilc t;ii;s SlfC siltiplr- it's nil about di>Tag|). But K\ hh < Inssir l;kjVS, 

there'i a *1i ».Sto/TagO anirl a do/itf/Tagi ;. Ami iluii brinn^ i a > » :ui 
iiHfivsiinir ]iiiib|c[n wIk-n :md liow i-. ilit- InmK c\ ulnaifd? Tlieix's 
iiocbBitdyO method, hut ilinr n a d&j'l/^i'BodyO method thaiV 
called a/ifr ihc body is evaluated mid before- die doEndTnql) runs. 



Web Container 



Classic tag class Tag Handler Object 




II i: ||fnH 
„.,. H . « 



Lead class. 



,— I _ i It J| I 

LilubalCrlanU'Err.Cma-H 
■ 

H 



o 



Instantiate class (no-arg constructor runs). 



Call the setPaneCorttexttPageCofltext) method. 



Call the tJoStortTagO method 



If the tog NOT deduced to hove on empty 
body. 4ND the tag is NOT invoked with on empty 
body. ANb the doStflrtTagf) method returns 
E V AL_BODV_I MCL UDE , the body is evaluated. 



/ If the body content was evaluated, call the 
V ^oAfterBodyQ method. 



Coif thedoEndTagQ method 



If the tag is nested (inveiked from withm another ; 
tog). coU the setParentfTag) meThod 



If the tag has artnbtnes, call attribute setters. 



_. iW, first tw> e 
TKw ^vo -tiie handler 5 
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The Classic lifecycle depends on return values 

Th* doStaf tTagO ;md doEndTagt) method! return mi i>u. Thai \m ir\k the 
Container what to tl*i next. With doStartTagfk the question ihi; Contains 
Riles i*, "Slmuld 1 evaluate ihr body?" (atgumtnj thfcrr is Me, and astuifung 
Mm TLD dncsni dcrbr^ ibc body us cmnm. 

With d(.»EndTiig(;. t ti e • Container *aL%, "Should I keep equaling the ml '.»r 
ihr calling pngc?*' The return values an* represented by constants dctiland in 
Mil fag and IteralionTag interfaces* 



Possible return values when 
you extend TagSupport 

doStanTagf) 

£KIP_BODY 

EVAL BODY INCLUDE 



SKIPBODY 
EVAL BODY AGAIN 



return E\ML_BODY_AGAlN 



^ doStartTagQ ^ . 
T 

return EVAL_BODY_INi:LU[>E 

XL 



return 5KIf>_B0DY 



SKIP_PAGE fthe 



ckAttwrBocly t) ^ ) 
return SKIF_BODY 

, 

{ doEndTag ( ) 



EVAL PAGE 




values for doStartTagf) * n " 
doEndTagd return value constants 
□ re inconsistently named! 

doE^r^f.), V» vataos are SKfP. WGE -nd 

!52SSff ^ distent doBndTagO *ouW 
f he names wen? consti"**", uu j raGE} 

EWL PAGE INCLUDE f^s opposed ^^ -^. j 
n?I UDE But K So 3S ft* ^ted V you ™* 




return SKIP_PA©E 
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IterationTag lets you repeat the body 

uii. n you writ* .1 tag handler thai extend* tagSupport, you get ;ill the lifccyck m< thods front dtt 
Tiiji intetiai e, phis (hr- one method from IterafionTag doAfterBodyfy Without doAfterBodyQ, 

you c*n*l iterate over the body because doSuirtTagO is wrry, and doEndTagQ is iocs bwa 

Itui u'nh ddAllrrBodyf), your return value tells the Container whether ii should repeal the body 
again i,EYAL_B(mV_A<.;AIN: ar mil the doLndTagl. method ;SKlP_BODY). 



Tag interface 



c<i'rrf=rfare :>> 
Tag 



int dofiarfJagf,) 
votf refessef,) 



T 



Jreratj'onTag interface 



/Jars [too Tag 



int doAfterBadyl) 



1 

TagSupport class 



TagSupport 



int doStartTagf) 
int doEniTTflg;;, 

'.' mote rnelhods. 




Arnpn UN ir rwiril Trv 10 ,rfl P |ement 1,16 33 me lunctionalrty of this 
at mci 1 yuui yra iui Sin ,p| eTag doTag 1 : in a Classic tao handler Assume 

(he TLD is configured to allow bod/ content, 



public void dotnq ( ) throws JspExcepticn, lOExeeption ( 
String [] movies - { "Spidenrian", "Saved!", "Amelie*].; 
for (int i = Of i < movie s. length; I 

getJspCantext <} , setAttribute ("movie", movies [i] t • 

getJspBody 0 . invoke (null) ; 



f( fickle And iwforb 

yMn dais Atylievattt-Ts^ extends Ti^Support { 



fvkk >*i do£ta*-tla^) tkrcwi JifE*ieptioh { 



} 
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Classic tag exercise 



BE the Container 

Look at llit 1 legal lag handler code h$\ow and 
figure uul wfcefter i( would five yon the result 
sliown. given tiV JSP lag invocation 
listed below, lliis is also die saine 
result produced by the CJassicTag; 
liandjer from the previous page. Yes, 
we're answering" the Sharpen Your 
Pencil 




The tag handler class 

fi package and imports 
public class MylteratorTag extends TagSupport i 

String!) nKivies= new String [] \ "Spider man", "Saved!", "Aroelie"); 
int trmviGCautiter; 

public int doSLariTag (} throws; JspException I 
roovi eCo unte r=0 t 

return EVAL_BODV_INCLUDE; 

\ 

public int doAfterflody ( ) throws JspException i 

if [movie Counter. < navies, length J j 

pageContexT ♦setAtt ribute ( rt inovie" ( movies [movieCounter] ) ; 

mnvieCounter-H-; 

return EvAL_BODY_AGAIN,- 
I else { 

return SKIP_BODY; 

i 

\ 

public int doEndTagO throws JspException \ 
return eval page; 

i 



JSP that invokes the tag 

tag lib pi*fix= J, i:iij;e" uii="Kdt!iyClaaaicTaga"' l> 
<html?<taody> 

stable border-"l"> 
-■-mine : i tera t eMovie a > 

<tr><td>$ {movie ] </tdx/tr> 
< /miner: i terateMovies> 
<7table> 
</bady>*/html> 
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custom fag development 

Pefault return values from TagSupport 

If yon dou'l override tin- TagSuppot't lifei-ycfe method? ih.it ret urn 
;m tn-teger; be aware of the default values the la^Suppon method 
imptementfltioiip return. The rugSupport class ^nin iliai your tag 
dotsrf haw B body (by returning 8KIP_BODY) from doStartTag •. 
and that if you DO hsivc a body that's evaluated, you ivaiit it 
evaluated only once (by it n i n mm Skll*_lJ< >t)Y IVotn doAftorBodjQ), 
It also assumes thai you want the rest ol the- page to evaluate (by 
fetufning EVAL-JPAGE I Venn doEndtagO). 



Default return values when you dent override the 
Tug Support method implementation 

doStartTagQ 



EVAL BOD^ INCLUDE 




EVAL_BODY_AGAIN 



SKIP PAGE 



The TagSupport class 
assumes your tag doesn't 
have a body, or tHat if 
body IS evaluated, that iJie 
body should be evaluated 



on 



It also assumes that you 
always want die rest of the 
page to be evaluated- 




doStartTagO and 
doEndTagO run 
exactly once. 

You r*>t!y must ^ this ffeayde for the 
exam Dart! forget that doStartTagO and 
doEhdTagO are atvays called and they re 
MM only owe roadless ofanytivng 
else tteA happens- But thAti&BodyQ 
can run from 0 to many t^JW^ 19 
on the return value ( 





Vou MUST override doStartTagf} 
if you want the tag body to be 
evaluated" 

Think about it! The default return value from 
doStartTagf) , s SKIP_BODY, so if you want the body 
of your tag evaluated, and you extend TagSupport, 
you MUST override doStartTagf} if hr no other reason 
than to return E VA L_ BOD YJNCLUDE 
W,th doAn&BodyO. it should be obv>ous thai ify 0U 
want to iterate over the body, you have to ovemde thai 
method as well, since jts return value is SKIP_B0DY 
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Classic tag exercise answers 

BE the Container Answer 




The tag handler class 

public c-Lass MylteratarTag extends TagSupport 



Actual result (unless you add the 
two lincj highlighted below) 



EH CDC', In lii iL 1"' l_ J» 










Spidennaii 


< ^ 

There's iw, e ^iy 
cell at tKt toy/ 




Aradie 



String!] movies- new string 1 1 I *Sri.idennan", "Saveri!", "Amei ie" ( ,■ 



int itiDVieCcjunterj 



public int nlgStartTagl I throws JspExneptinri 
(gov ieCount e r =0 1 



pageCon text . setAt tribute ( 1( movie" , movies [movieCounter] ) 
movieCounter++ ; 



return FVAL BODY TNCWDE; 



public int doAf teiSody I ) throws JspEK'^eptioo I 
if (mcivleCounter < movies* length) I 

p&gocojitaxt .setAttiibuto {"tuoviti", tttavies [Bftoviecoumtetl \ t 
rnovisCounter ' « ; 
return EVAt-_BOryf-_AG,AINf 
| else I 

return SKIP BODY; 



I 



public int doEndTaq ( \ 
return EVAL_PAG£; 



thiowa JspEjtccptiani 



JSP that invokes the taq 

iffl taglib prefix^mLne" uri="KathyClassicTagfl" %> 
■J-.it ml " body-* 

'"table bordsr="l w > 
<mine; t terateHovieO 

<tr><t<k>$ (movie } <^ t«Jx/tr> 
■c/mine: iterateHovies> 

<7borJy></html> 



^ ***** 



- **S5 

St n.« c^fy ^FJ^ S 



**W*fe *» j* ^ ft, c ^ y £eJj 
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custom tag development 



Dumb Oil 



0: 

This «ems stupid— there's 
duplicate code in doStartTagOand 
do After Body | }. 

A- 

XX Yes, there'* duplicate code- 
In thi-s case, if you're implementing 
TagSupport, and you want to set 
values the body can use, then you 
MI/ST set those attribute values in 
doStartTagO. You can t wait until 
doAfterBodyO, because by the time 
yuu it: LJuAtii-rBuiJvi.: 1 1 1 >. b(„-(iv 
has already been processed once. 

Yes, it'i kind of stupid. Which is why 
SiinpleTag is so much better. Of 
course if you were writing the code, 
you'd make a private method in your 
lag handler... say, setMovie{), and 
you'd call that method from both 
doStartTagQ and doAfterBodyd. But 
it's st i 1 1 a n a w kw ard approach . 



jJ'—J -rho Container c;*., 
■pfl" rouse Glasslt tag 
handlers I 

oul —this is completely different 
from SimpleTsg idlers, which are 
definitely NOT reused. That means yoa 
have lo be very careful stout instance 
wriabtes-y^ shouW reset them m 

The Tag interface does have a released 
Mthod. but that s called only when 
the tag handler instance is about to be 
removed by the Container So don t 
assume that release® is "ggjgf 
ih& lag hand! 
invocations! 



WHY are you letting 
the instance Variable Value 
I ii r mttntCourtt er INSIDE the 
daStartTagll method? Why can't you 
ju»t Initialize It when yew declare k» 



A" Vikes! Unlike SimpleTag 
handlers, which are never reused, a 
Classic tag handler can be pooled 
and reused by the Container. That 
means ygg'd better reset your 
instance variable values with each 
new tag invocation (which means in 
doStartTagQ). Otherwise, this code 
works the first time, but the next time 
a JSP invokes it, the motaeCounrer 
variable will still have its last value, 
instead of Ql 
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automating a select tag 



OK, let's get real. 



impjxw it ;i hir. utkI ;i«iTi>rnHtfi nf the HTML form; 

['.'ifiL tiiethud="PQST" actlon="'SelectBi"ar .do w > 
<p>Select beer characteristics;</p> 

<selert name-'colQr' size-'l' > ^ , v 1 I* t*»C 

<optlon value-' light '> light </option> ^ > m IK* <rt1«tt> t*5 tt 

<option value='amber'> amber </option> "W« ayy1'£*t |£m 

<option value=' brown' > brown </option> 
•Coption values' dark:' > dart </optiQn> 

</6eletrt> 

<brxbr> 

< input type="SUrMIT J, '> 
</tota> 



li wl* niiikc ilic optiuii.s dynamic, they'll be easier to 
updatr and change, without nmttitn atotufcri with thi- 
ll I ML Iiisitiicl, wv warn tin- options tit In- generated 
["nun a Java List <T<'itii'<t in the w-li application, So 
here's I hi - nislnm lag W* WjtBI W Iwihl; 

<Eorm met hod= "POST" action="SelectBeer .do"> 
<p>3clGct beet characteristics :</p> 

Color) ^- °+ <fW ^ " s tKe W: 

■<£orirtTdg£: select namo=' color' size='l' ♦ Hmfe£a fae 'Van-J^ ~_t5 ^ 
optiorjaList^'SUpplicationScape.colcxIa.atl' A* " F f""^ ifa[„ H . 



-:br -<br> 
•iinput tipe="SUBRH"'> 
</form> 



thii bj, to ijf tan tKahje -the 
data in an HTML W 
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custom lag development 



n your pencil 



Your mission (if you choose to accept it) is to complete 
the implementation of the select tag handler. 

First, the handler class needs to implement setter 
methods for each Lag attribute here's a skeleton to cot 
you sterted: 

package com .example. tag lib; 

// assume all needed import statements 



SimpleTagSupport 



p 



Sel&ctTagHandler 



*se!OfiilonsL'>st(List} 
■*setHsmetSirir]g) 
*satSizB{$tring) 



1 



public cla33 SelectTagHandler extends SLmpleTagSuppoii: I 
// store the 'optionaList' attribute 



// store the "size.' attribute 



// store the 'name' attribute ^ 0 3 ^ad **6 

your tpAt h * ^ e 



I 



Continues over the page *- 
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cods ng the select tag 




Next, complete the implennerttat™ of the select tag 
handler class by writing the doTag () method. We've 
provided the method signature and a few helpful 
comments help you out. Don't forget to take a look at the 
HTML that this tag needs to generate on page 542, 

ft generate the oeiect> and <option> tags 

public void doTagj} throws JapExcepticm, IOException | 

PageContext pageContext - (PageContext) get JapContext () ; 

JspWriter out = pageContext -ge tout. ( ) ; 

// Start the HTML <select> tag with HTML- specific attributes 



AW todc {c write, 




here... 



// Generate the <option> tags from the options List 



// End the HTML </seLect> tag 



\ // // END of doTagO method 



I // END of Select Tag Handler 




Continues over the page 
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custom lag dweiopment 




irpeti your pencil 



Now ygg need to configure the select tag in the TLD file 
The boderplate elements of the TLD are already provided 
for you. You just need to add the element to declare the 
select tag. its handler class, and all its attributes. 

<?xml verslon="1.0" encodlfig="ISO-B859-l" ?> 

<[DOCTYPE taglib 

PUBLIC W -//Sun Microsystems, Inc. //DTD JSP Tag Library I.2//EN" 
w http://3^'ua,sur],ccjrt(/j2ee/dtd. i j/we!b-jRptagli br a ry_l _2 , dtd " > 

<taglib> 

<tlib-ver3ion>1.2</tlib-version> 

< jsp-version>l .2</jsp-veraion> 

< sho r t- name>Fcirnts Tag 1 ib< / s ho r t -name > 

<uri>http; //example . com/tags/ forms</uri> 

<descrlpt ion> 

An example tab library of replacements for the HTML form tags. 
</description> 



<!-- Add elements to declare the tag name, class and body type --> 



<\ — Add elements for options List attribute — > 




<l — AfM plfinipntK Frir lump ^ttri.hnt-p --> 




Add b 



<!-- Add elements for size attribute --> 



</tagllb> 
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handling attributes 



pen your pencil 
Solution 



Your mission (if you chose to accept it) was to complete 
the implementation of the select tag handler. The 
handler had Ed implement setter methods for each 
tag attribute. The handier also had to implement the 
doxagn method. 



package com. example. taglib; 

// assume all needed import statements 



SimpleTagSupport 



5 esectTag Handler 



♦seJMamifaring) 




public class SelectTayHandler extends Simple Tag Support | 



private List optionsList; 
// store the 'options List' attribute 
public void setOptionsList(List value) I 
tfils.optionaLi3t = value; 

I 



$*Oer mcihcd and 
iniWe viable lev ibt 
opfcoMLiH attribute. 



private String name; 
// store the 'name' attribute 
public void setName (String value} { 
this. name - value; 

i 



private String size; 
// store the 'size' attribute 
public void aetSize (String value} [ 
this. size = value; 

I 



Sitter »rtWJ and 
iwtantt variable -Co* 
fa W attribute 



It other SelectTagHandler code 
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custom lag development 



iharpen your pencil 
Solution 



Next, you had to complete the implementation of the 
select lag handier class by writing the dolag 0 methgd 
Here's the code we used: 

// generate the <ae.lect> and <opt.ion> tags 

public void doTagO throws JspException, IOException [ 

PageContext pageContext = {PageContext) getJapContext ( ) ; 

JspWriter out — pageContext . getOut (') ; 

H Start the HTML <s-elect> tats with HTML- specific attributes 

^ out, print ("o elect ") ; 

out, print (String. format (ATTR_TEMPLATE, "name", this. name) ) ; 

out, print (String. format (ATTR TEMPLATE, "size", this. size) ) ; 
L out. printing' ); 



// (generate the <option> tags from the optionsList 
for ( Object option : this ► opt ionsLiat ) I Tte rftiwiUst ofcjett i» 

a~ ^- i^seb -U £«ate -k^c HTML 

String optionlag ^ ^ bp 

- String. format (0PT10H_T£MPLATE, option. toString () | ; 

i in" .pri nl . n (op- . >n1 ag) ; 

I 



// End the HTML < /selects tag Pbdty, jMt fata kjndler 
out. printing -i/EelQct>") 

// END of doTagO method 



out .print In (" tf/^l*efc>"*1 ; ' r*" i«l*Sf. output tK* tl<wi„« 



private static final String ATTfc_TEMPLATE - *%3-'%s' "; 
private static final String OPT !ON_TEMP LATE 

= " <option value='%l$s'> 4l$3 </opticn>"; 

| U END of SQlectTagHandler 
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the deployment cteseriptof 




Then, you had to configure the select tag in the TLD file. 
Here's what we did to add the element to declare the select 
tag. its handler class, and all attribuies. 

<?xml version="1.0" encoding=" 1 ?> 

<!DOCTYFE taglib 

PUBLIC "-//Sun Microsystem, Inc. //DTD JSF Tag Library 1.2//EN" 
"http:// java.sun .com/ j2ee/dtds/web-jsptagl ibrai:y_l_2 .dtd"> 

<taglib> 

<tLib-veraion>l ,2</tlib-ver5ion> 

< j sp- ve rsion>1.2</j sp- vers 1 o n> 

< s hor t -name >Fo ritis Tag 1 ib< / a hor t - name > 
<uri>http: //example. com/tags/ forms</uri> 
<description> 

An example tab library of replacements for the HTML form tags. 
</description> 




< tag- cl as s>coni. example . tag! Lb . SelectTagHandler</tag-class> 
<b'_idy - c i jI'i t e n t >en ip t y < / body - con t en t > 



<attribute> 

<i ia]iiw>t_ipLiunt;Lii>L<:/i)cu:i-i= , > 
<type>java . utll . List</type> 

< r equ i r ed> t ru e < / reqn.i i r ed> 

< r t exp r va 1 u e > t. rue < / r t e xprva 1 ue> 




</altrlbute> 
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custom lag dweiopment 




<attribute> 

<n ame >name < / n a me> 

<requ I r ed> tr ue< / requ i r ed> 
</attribute> 




<attxibute> 

<n ame>s i z e< / name> 

<required>true</rerfijired> 
</ attributed 



</tag> 
</tagUb> 



attribute art Mi* 

typ d(f*-lt t£tri«5> 



Do you think the name and size attributes should 
allow runtime values? Why or why not? 
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we forgot tome attributes 



Our dynamic <select> tag isn't complete.. 





The HTML <select> lag accepts many more t-Tf? attributes 
1 1 1. ui jn-i : i ' ' i Mi'. I . . r.iv: 



Core attributes: id, class, st 
InternsttinTmlt/aliun 3(lri bul4>h 



Is, and title 
Lang awl dir 

Event attributes: one] tote, nndblclick, anmousftnp, 

onmouaeup, onmouseover. onmousemove, 
'.■iimouaerjut, onkeypress. on key up, ;mrf 
onkeydown 



yl&u tm use 

Form attributes: name, disabled, multiple, size, foot, in 

tabindex, onfocua, onblur. and list 



onchango 



bane* Jjjd 
list ixrvfi. 
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custom tag development 



We could just add more custom tag attributes. 




Gary's drsj^l is Vrr\ simple; we 
jlisi ut-i'A hi add ;\ urtlcr nirlhucl 
lor nil of tb.tr HTML piiss-ibruugh 
titg attributes The UML lor the tag 
i hiss i;, nil tllf riylil. whli nil the 
iih-iIiihIs we'll (U'ftl t<' .'irlt'l. 

Here's the cexk i A< this work; 



public class SelectTagHandler extends SimpleTag Support 
// tag attribute (setters and instance variables) 
public void setOpti oris List (List value) ( 
I hj =..QptionnI-ist = value; r\. 

i 

TViii u the only 



private List optionsList - null; 

public void set Id (String id) { 
rhi.i.id = \dt 

I 

vifiii'il-A <7ir»*lr<p* 1 i4 t 



public vfjid 5etCla5K {Str\ ng sty letUass) , 
this. styleClass = styl-eClass; 

I 



h> the icier* tarj. 



private Sit ring styleClass; 
// more code on the next page 




-seJGIassfSfrmpJ 
ts^Sl^fSdrngJ 

•s&JtangfStn'ngJ 

+seiOw7i«i5em)('SirfflgJ 

•setOnmouseoverf String) 

*aeJOf7mooier7WvefS^nij,l 

*sp!0U7iffl;se?iLrf|'Stn - nal 

*setOftk»fdomf$bmg) 

*5ei0n*ieyupf£fflngJ 

-seJiMamefSriing) 

* __jj%_l_r. a 

"aw'jr^urtoinTi'uy 



T>.c i-e*t ^ the ijg j^t*** ar e 
t# the wtb broker Tha U WW 

tte* thr» 3 h ***** 
<« lett> tag outfit 
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pass-through attributes 



Son of more tag attributes 



public void setstyle (String style;) ( 
this .style = style; 

I 

private String style; 

public void setTitle (String title-) ( 
this.title - title? 

I 

private String title; 

public void setLang (String iang) I 
thi&.lanq = ljciq; 

I 

private String lang; 

public void setDir (String dir) ( 
this.dir = Sir; 

I 

private String dii ; 

public void setonclick (string onclick) i 
this. onclick - onclick; 

I 

private String onclick; 



c void setOndblclick [String ondblc-lick) | 
this.cftdbtclicjt - ondblclicle; 

I 

private String ondblclick; 

public void eetOnmouseup (String orunouseup) [ 
this . onmouseup = onusouEoupj 

I 

private string uniiKJUEeup; 

public vndd setQnnwUEedown (Strtng i?nmo«sedovn) \ 
this . onmousedovm = onroousedovn; 

I 

private String onmousedown; 

public void setOnmousGover (String onmouseover ) I 
this.onmousecver ■ i>nmouseover; 

I 

private String onnsauseove r ; 
// nvore code on the next page 
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custom tag development 



The return of the son of wore tag attributes 



tff, you yrt ^ <w e „ 



public vr\4 Fi=t.Onn>nuHHm(5ve (Stri ng ojimoilfieinr'Vf!) \ 
this. onmousemove = onmousemove; 

I 

private String onmousemove; 

public void setonmouseout (String osfimoQa&CQt) | 
this.onnTOWsecut - unnrauseoutf 

I 

private String onroouseout; 



public void setOn keypress (String onkeypress) I 
thiii.L''r.k6;yptefls = o-nkeyprass; 

\ 

private String nnkaypresi?; 

public void EetOnJceydown (String onkeydown) | 
this .onkeydown = onkeydown; 

I 

private String ankoydown; 

public vtdd se ton keyup (string onkeyup) [ 
this. onkeyup » onkeyup; 

1 

private String onkeyup; 

public void setName (String value-) ( 
this, name = value? 

I 

private String nssne* 
put'lic void setSize (String value) ( 
this. size =■ value; 

I 

pj-ivflfp Strinrj size; 

public void setMultiple (String multiple) [ 
this. multiple » multiple; 

\ 

private- String Multiple; 

public vcid satDisabled (String dlsable-d) [ 
this. disabled = disabled; 

\ 

disabled; 



// evan more code on the next page 
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even more pass-through aff/vbures 



I'm getting sick of these tag attributes! 



public void eetTabindex (String tabindex) [ 
this .tabindex = tabinde-x; 

I 

private String tabindeK; 

public void tOrifocue (String onfocuc) [ 
this. on focus - ontocus; 

I 

private String on focus; 

public void setOnblur (String onblur] l 
thiii.L.'i±)iur = uiiblur; 

\ 

private String nnbJur; 

public void setOnchange (String onchange) [ 
this.onchange = onchange; 

I 

privets String onchanqe/ 




uune *t\th the tjg 
attribute ttftet* 



// generate the ^select.- and ^option;* tags 
public void doTagf) throw, 1 ; JspException, IOException \ 

PageCor.text pagcContext = (PagcContext) getJapContext < i t 

JspWriter out = pageOontext.getOut () ; 

// Start the HTML <select> tag with HTML-specific attributes 
out. print ("^select *) | 
// add mandatory attributes 

out .print (String. format ( ATTR._TEMPLA.TE , "name", this. name)) ; 
// add optional attributes 
if ( this. id != null ) 

out .print (String. format (ATTRJTEMPLATE, "id", this.id)); 
if ( thls.styleClass ]= null ) 

tutt .p.r In t (SI- ring . format ( P,TTP_TEHPLflTE , VU<;s", t h i s . ^(-y lpHla'ssJ > f 

if ( this. style {= null } 

out .print ( S t r ing . f o rma t ( ATTE_TEHPLATE , 
if ( this. title (- null > 

out .print (String. format < ATT E_TEMPLATE t 
if ( this.lanq 1= null ) 

out. prijit (String. format (ATTRJTEMPLATE, "lang", this.lang)); 
if ( this.dir (- null ) 

out. print (String. format (ATJ*K_TEMPLAtE, "dir.", this .dir) ) t 

n I . 'i , m ft* m m **** ^ doTa 5 c> ? 11 2^ 



"style", this . style) J ; 
■"title", this. title)) ; 



another fije 



an d 3 half M >t'> V^l' ertW 
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custom tag deveiopment 



Ugh, look at all of 
those silly setter methods. 
Creating code like this is so 
tedious There's got to be a 
better way, right? 



You're right. This sulmion sticks.. And it's ion* ol" code m 
keep up iykh Worse, wbm if wt- warn to create a suite <.>i 

custom lugs lo auj^usatl other HTML Lags?! 

The ia» handler class must implrnifnl a seller method for 
each □!' the tag attribtitca declared in ihc. TLD, Bui thesr 
setter methods aren't really doing anything interesting. The 
values of these attributes are simply passed on to the output 

gem rated fbr the HTML <nelect> i ,. 

We mulrl apply att design ptim iple: ''Encapvttlate thai 
which viin<'s."* In this case tin; net of optional HTML 
tag. attributes is ilic thing that varies in ihis tag handler. 
One s-oluiion would hr u» put all of ihe attribute? into 
a hashlahle. This (jeneraliaccj the tag object's storage of 
attributes, hut what about all these setter methods? We can't 
#et rid of them unless there's a way ro lell dteJSP ei^ginc to 
uei the taff attribute* miuK ;i ii mn-rfaf*!- 



* Tkii des.jh principle ^ dinned or, 
Head first Objeit-iV^kd My* 
*,d De*^ m ^ ViO. 

0( tonne, we wdd never sha*.eleis.|y 
pb^ JndJiPr Head First fwolc, rijht? 
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dynamic is more flexible 





«j'rtferfaoe*> 
DynamicAtiributes 




uri.Strmg. 
name String. 
value.Objectl vox) 



i 







SelectTagHandler 


-0pl1wsi.i5li.ilJ 






*setOptiat}sbst(Liai) 


*setDynamicAttributs( 


uri:String, 








J"ILJ^*Jh , .,M.iJ 







* : 

You wiH not be tested on \ 
\ the method signature 

and definitely not on the 
purpose of the uri parameter 

Hell, we don f even know what it s for. ■ 
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custom tag development 



Our fag handler code using the 
PynamicAttribufes interface 

J.i f- L-xaminc Dyn ami cAt tributes looks inaction, First* our 
tag hitndltT cla.ss must implement the Dynamicftttributes inUTliu.'t 1 

from the JSP AH. Ami thai Interface require* you tu implement the 
setDyndttiicAttrifcujte ( ) method. This method nced^ h rtorc the 

mi iii'iic n. ;/valuc pair?; ;i hashniap is the perfect cjbata structuie » 

hold this information; 



package Mirt.exiUrtple.taglibf 

import java.lo.IOExceptlunJ 
import java.util . ttoiihM&p; 
import 3ava.utii.Li5t; 
impo r t j ava . ut il . Map f 

import lavax . servlst . j sp. JspHxception; 

import javax. servlet . jsp. JspWr iter ; 

impo r r. j a vax . se r v le t . j sp . PageCan cex t ; 

import javax. servlet .jsp, tagext . DyriajnicAttributes 

i mpnrt javax . serviet . j ftp. tagext .SimpleTagSUpport f 



/* * 

* Version three of the HTML select tag uses the JSP 

* dynamic attributes mechanism to store ail of the 

* pass-through HTML attributes ifi a hashtsiap. 

public class SelectTagHaildler 
extends SimpleTaq Support 
implements DynamicAt tributes t <T 

/ / store the v optlonsLiet' attribute 

P*^M"1'*? vuid iietOptli_ULtiLii;L (L.iu L Vdlja) ( 

this.optiDnsMcit <* value; 

private List optionsLiet - null; 

H store the 'name' attribute 
public void setHanie I String value) \ 
this. name - value; 

i 

private String name; 



name, Object value) 



store all other (.dynamic) attributes 
public void setDynaiiiicAttribute (String uri, 
tagAttrs .put (name,, valu*} ; 

] 

private Map- String;, Object:- tagftttts ■ tteW Has hfep<Striti3, Object* () ; 
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adding dynamic mributss 



The rest of the tag handler code 

The only ihiii^ td5 vs. tfie cjoTagO method, T3i<- i«tlv tljfU'Ct-iic-f- 
now is tlioT the generation of ihe HMiukiril HTML <oelect> tag 
.mm iluiirs ate stored in the hflihffiflp. Ths ctoTag f} method must 
Iterate mtt each miry in the map ,mcl ^nuTiue ilit HTML aitriljmr 
binding in the output stream, Everything else is the same. 

Pretty easy, buh? 

generate the <select> and <'option> tags 
public void do Tag O throws JapExeeption, i'JException \ 
PageContext pageContexc = (PageContext) get JspContext ( ) ; 
JspWriter out - pagaContext .getOuL f | ; 

// Start the HTML <^elect> tag 
out .print f "^select ™> i 

// add mandatory attributes. 

out -print (String. f turret (ATTR_7EHPtATE, "name", th.is.nmne)} f 

tt add dynamic attributes {fa «t of ^a*^ 

„ , — ™ . , , ( ^-X'^^ 

String aLLrDefirLLtion Wff 1i ji UteJ- 

- String, format (ATTR^TEMSLATE, j^a"" 4 
attrNams, tagAttrs . get (attrName) ) i 



out, print fattrDefinition) ; 

out. printing *>' \ ; 



^ wt:!^" ,| ' ,r * i '•*» 



// Generate the <option> tags from the optionsList 
for { Object option : optians-List ) | 
String r\ptionTag 

= string.fartret (QPTrciN_TEMPiaATE, uptiarutastr ing () ) ; 
Out .printin (Gptj.oTjTsy} } 

\ 

ft End the HTML </j3(5leGt> tag 
out.println (* </seloct>"'} ; 
> U END o£ doTag method 

private static- final String ATTR_TEMPLAT£ - "%s-"ts' 
private static final String OPTION_TEMPLATE 
= * ^opticn value=* h\%s' > fcl$s ■; /option-'",- 

I // EMD of SelectTagKandler 
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OK, there is a little bit of 
configuration in the TIP 

Hull! Vnu dicln'i think ihc suliuiun was only in rode, did yn? Of course, 
there is iui tk' incut i»l rnjitiuiii'alirin ti.<|iiiivi.l. Hfejfi U*i the JSP spec we're 
talking ahdLH here, Fur innately, ihr change is painless. The t Itnuiit you 
ftcetl Id include is named <dynaroic-attributes>: 

<?xmL version="1.0" encoding=" 150-8959-1" ?> 

<!DOCTYPE taglib 

PUBLIC "-//Sun Microsystems, Inc. //DTD JSP Tag Library 1.2/ /EN" 
"http : / /java. son. com/ j 2ee/dtds/veb-jsptaglitarary_l_2 .dtd"? 

<taglib? 

<rlib-versioii>l .2<7 tlib-version> 
■c j sp- ve re i gn> 1 1 £</ j sp- ve r s i nn > 
short- name > Fo rms Tagl ib< / s nor t -name > 
^ur i>http: //exanpie .com/tags/torms</uTi> 
■^descriptions 

An example tab library of replacements far the HTML form tags, 
•^/descriptions 



<taq> 

< name ~'se lect < / name> 

<tag-class>cofti. example, taglib. SelectTagHandler< /tag-class > 

<body-content >empty</body-content> 

<dascription> 

This tag constructs an HTML form 'select' tag. It also generates 
the 'option' tags baaed on the set of items in a list passed in 
by the optionsList tag attribute. 
</de script! on> 

(attribute^ *v 

■■-'nante>optionsList</name> j , £ t t\&rt 

<type>java.util.List<:/type.-> I V«»* ^ 1,6 LJ™,U.VfJ 

<rtexprvalue>ttue</ttexprvalua>- \ £^ -rWlC hav * u j 

(/attribute f Sfc***** ^filtr 

attribute:- * ^ ' 

< name ?name< /name> 

<requi red>true< /reiqui r ed> 
< /attributed 

adynamic -a tfcr lbutes>triiB</dynami c -attribu tea? 

I * de-ent b all n « d ^ dtt] ^. 



you are fiG/n » 559 



invalid attributes 



0: 

You were using a Simple tag, Does 
This work with Classic tag s r too? 



Yup, the Dynamir-At.l-ri buts*. 
interface can be implemented by a Classic 
tag i n the sa m e fash ton a 5 with a Sim pie tag. 
Even the configuration in the TLD file is the 
iame, 

Q* Do dynamic attributes accept 
runtime expressions, like EL or <:%= %> ? 

At* Alwulnirlv. flj default CW) 
dyrjartik attribute ruay u*t F.L nr JSP 
cx|)n-ssitui latjs i" s]H-Hf\ I lie \ iihtr n|' 
the attribute. In fact, did you notice thai 
the data type pf the value parameter 
of the setDynamicAt tribute 0 
method i* Object, and m»i String? 
This nii-;nis thiil ihr value < ;iil evaluate 
In war Java itl.i.'i l. 

Q' What if I need to "compute" an data 
in a given dynamic attribute? 

A: 

You cam always inspect the name 1 
parameter nnrf derirfp tn pprfnrm inmp 
computation or transformation of the value 
of that attribute. But if you need that kind 
of functionality, then you should probably 
make that attribute explicit, and perform 
your computation in that attribute's setter 
method. 



0 : 

UVhait happens if the custom tag 
user enters an attribute name that is 
invalid? 

A" TWP ft c!u ' SS^jOQO qu^rinin- 
Becatue thr attribute name* are 
iml cXplirilh declared in the TLD, 
the JS| J i-nifinr sends . n I J ruhrr 
3ttril?UtEjl tn the tug handler usinp tin 1 
setDynami cAttributQ (} im-diml. 
I In rJetlui is thai ihf JSP author ittijdn 
mistype the name of .i Mamfard HTML 
an HI nn<- arid never know ii — at leaai 
until ihr bttrtwr failed t'» inv>kr I J i ■ - 
behavior of that attribute. So, the 
first loUtdon Gary proposed [using 
BJtplidl attributes wi£b letters and TLp 
dci laratioris) has merit, Can vim think 
of Other reason* why Gary 1 * solution is 
belter tlimi Kim's* 



FLEX YOUR HIND 

Gary's solution made aii 
attributes explicit. Kim's 
solution made most of the 
attributes dynamic. Both 
solutions have pros and cons. Is 
there an alternate solution? 
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custom tag development 



What about Tag Files? 



Li^ 1'iii-r- 1 an cnelud? clvmimii- atulhuirs. \~hr. iix-di^jiifctt! i^ 

basically the s;uiif. l>iti with Tag Hks ih<- JSH engine provides um ^ ^ ^ t i^amit-aWr 1 ^*^ 

IH|><ihffi1 !'<>r you: Yoh qui impen m iicr;iic mvr ihni map i»f "'"Jf ^ n a farje-^r"** rtr,s ^ e 

Ktl riluttr/valnr pairs usinii tin- f orEach JSTL, tuff ^£ 3 te^i-af 



<*@ tag bQdy-Crjnt--er=L=' empty' dyn^mi c-attflbutfea- ' tagAttrs' fe> 



<fj| attribute name-' opt itmisList' type-' javatUtil.Lii 
r&quire.d=' true' rtexprvalue= ' true' iJ 



<%& attribute rsarme=' najne' required=' true' ^> 
<<*2 taglib UEi="http: J //java.Limi .L-an/jsp/jjstl/ 




preJix="c" V> 



<select name= ' $ \ name \ ' 

<c;f orEach ir*r-"at.trEntry" i terns- ''S'taqAttrsK^ 
% { attrEntty . key ] = ' 5 [ attrEntry . value } ' ^ 
</c;forEach> 

<cif orEach var-"npti°n w it<zm5- H $ (optionsTListi "> 

<option value=' S (option}* > $1 option] </option> 
</c; t orEach> 



</select?- 



-BULLET POINTS 



» The DynamicAttributes interface allows the tag 



The tag declaration mine n D must nuude me 

< dy n ami u - a 1 1 1 i b u t es > element 

Explicit tag attributes must have a setter method. 

Typically, you will use a hashmap to store (he 
dynamic attribute name/value pairs using the 
setDynamicAt tribute ( ) method. 



Tag Files may also use dynamic attributes. 

Use the dynaraic-at tributes attribute Of the 
tag ditective 

The value Of dynamic-attributes holds a 
hashmap of 1ne dynamic attributes. 

Typically, you will use The JSTL f orEach custom 
action to iterate over this map, 
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BodyTag interface 



Put what if you VO need access to the body contents? 

You'll probably find thai most of the time the lil'eeyele mednHls frota tin- and 
Iteration' Tag interlaces, as provided by TagSupport, arc enough. Between the three key 
method* (doStariTag0, doAf'terHodv; ;■. and doEiidTag()|. you can do just about nnvthing. 

Except... yo n don't have direct access tn thr omtnits of the body. 11' you need access tri the 
LH tu.i] body contents, so dim you can. say, use h in an expression or perhaps filter or alter it 
lit some Wi4\v then extend BwtyTagSiipporl instead of TagSnppart, and you'll have . i*--: to 
the BodyTag interface methods. 

Extending RodyTagSuppoft 
gives you two move Ifeyele 
methods f mm the BodyTag 
interface-setBoc]yConi(?n£() 
and doInitBodyt). You can 
use these to do something 
with the actual CONTENTS 
of the body of the tag used 
to invoke the handler. 



«rnterfflce» 
Tag 



frt doEndTagQ 
Tag gitParent() 

void selPageCon!ext{PageCcnteni) 
vai'ri s°tP?nint{Tagj 
void reteasefj 



Iteration Tag interface 



«intBrfece» 
H&ationTag 



intdoAH&iBodyi} 



T 

Body Tag interface 



TagSupport class 



JL 



*<-ir\terfac&>> 
BadyTag 



widdvtnHBiutyf} 

void iet&wlyCf)fitentiBo<}}!Ctmlti\l\ 



V 



TagSupport 



ml doAflsrflodyO 
irrt duSlsrtTagO 

irrt drf- rvTTsm'i 

— -av 

void setPagfi£orilj&<t(PageCorLtflxf| 



^ ^ Body TagSupport class 



BopyTagSuppprt 



intdoStartTag) 

BodyContenl getBodyContenlQ 
vo-4 do!nHBody(] 

void s*t8odiiC(inl*nl(B[>dyC&n[afli) 

mate rostfiods 
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With PodyTag, you get two new methods 

Whto you impkuH-nl EtodvTuu (fey Smiling BodyTn^Suppiirij. you g^t 
hvi> more iilccyde methods— srtBodvConieiiti;' ami doIriitBadyQ, You iilsu 
get one new roLuru value lor doStarlTaglj. EVALJJf >UY_BUl ; l J EfcED. That 
means there are now thttt potstbte leturn values for doStartTaei i, instead 
■ ;.| llir f;c« you |Ct when yoil rSU-ml TitgSuppoll. 

Lifecycle for a tag that implements Body Tag 
(directly or by extending BodyTagSupport) 



C 



return 
EVAL BODY SUFFERED 



BtBody Con tent ( } 



c 



doImtBody ( J 



— doStartTag { ) J^. 
return EVA L_BODY_INCLUDE 

"4 



return. 5 <IP_BOt5Y 



return E 




^ doAf terBody < ) ^ 



return 5«P_B0DY 



A change in th* default return 

value for SodyTagSuppori: 

etoSrartTagfl 

SKIF_BOD¥ 

EVAL BODY INCLUDE 



< ^-^^^3°DY_BUFFERED^) 
hft* «Wn «U M ,Vl *J« 

<Uad of SKIP JW «* 



C 



doEndTag j )■ 



return EVAL PAGE 

i 
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Bod/Tag and BGdyTagSupport 



With MyTag, you can buffer the body 

The BodyGonteni ttrgtmuml to sctBadyGoniniH) \* w:\uA\\ w 

type ol jnvti.io.Writcr. i.Ycs. < )K to find lhal disturbing from an 
< ) perspective.! But lhal means yo« (an prf>ce;>s the body hy, say, 
< I tain in i; ii to another 1(J stream or getting the raw hytes. 



What happens If I return 
EVA L BODY. BUFFERED even thou a h the 
invoking tag is empty? 



The setBodyContentO and 
dulnitBodyO method will not be called 
if 1 he tfl-q in yoking the h an rile r is empty! 
And by empty, we mean thai the tag was 
invoked using an empty tag <my:tag f> or 
with no content between the opening and 
closing tags ^rrwitag^myitagx 

The Container knows there's ho body this 
time, and it just skips to the doEndTagO 
method, so this is usually not a problem. 

Unless the TLD decinres the frag to have an 
empty bvtty! If the TLD says 
<body-content>empty</uody'Conterit>, 
you don't have a choice, and you must NOT 
return EVAL_BODY_BUFFERED or 
£VAL_BCjDY_INCLLIDE from doStartTagU. 




,,,, 



You don't need W 
knowaH llretfef 
using SodyTsgSopport- 

return £ wl - kn0W the 

i - ■ - ■ ' 

lim . 1 ..,,ii "' 



What about attributes in a Classic 
tao? Are they handled the same way as 
with Simple rags? 

A: 

£\ Yes, on the sequence diagram for 
both Simple tag handlers and Classic tag 
handleis, there was a place where bean- 
style setter methods are called for each 

attribute. This happens before a Simple 

tag's doTagf.) or a Classic tag's doStartTagO. 
In nther words, tag altribules work in 
e-x^Clly th£ >arne way for both Classic ^rid 
Simple tags, including the way in which 
they're declared in the TLD. 



"Hie TLlllo r;Jt 

" »«ir DUUfl 

Mar miytx 0& obvsoux hi,t e m 

*eep your tag ^ to be 

tag m the TLD to have ^Jft^i , ^ S °' ^ B 

» 'fomenting tentwTav 1 7Jr ther « 

>s no point 

ending Tggsupport. * U! ^ 9et(hat automatically by 
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Lifecycle methods for Classic tag methods 

Fill in thp rtiarf hfllnur We've m»r«f almnxt pverylhing ynu newl fn rin this 
^rClSe correctly, but you'll rave to guess m a few places. {Don't turn She page!) 



BodyTag Sup port 



Tag Support 



doStartTag() 

possible return values 



default return ■■■a ue from the 
implementation class 



Number of limes it can be called 
(per tag invocation from a JSP) 



doAfterBodyO 

possible return values 



default return value from the 
imptemenlation ctass 



Number of limes it can be called 
(per tag invocation from a JSP) 



doEndTagfl 

po&sibSe return- values 



default return value from the 
implementation class 



Number of limes it can be called 
(per tag invocation from a JSP) 



dolnitBodyO and 
setBodyContent() 

Circumstances under which they 
can be called, and number of 
times per tag invocation 
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Classic tag lifecycle return values 



.I^C^, Lifecycle return values for Classic tag 

^Ji jteFcise Ym re ei<pa£ted t0 hf1 ™ a " of this fQf me ei!iyTt[ 
Answers 



methods 





BodyTagSupport 


Tag Support 


doStartTagO 

polite return values 


EWL&ODOwFFERED 


£ML_B0DyjrYCLKDE 


ctefeulr return value from tfie 
implementation class 






Number of limes it can be called 
(per tag invocabOn from a JSP) 






doAfterBodyO 

possible return values 




s^Jp_&0PV 


default return value from the 


s*3P_B<JE>y 


£KlP_&fl>V 


Number of times it can be called 
(per tag invocation from a JSP) 




Z*ro to "Jhy 


doEndTagO 

possible return values 


&!|P_PASE 




default return value from the 
implementation class 


EVALJV^E 


£WL_P/^E 


Number of limes it can be called 
[per tag invocation from a JSP) 


E*a£ty <*ee 


E«ttly <mc« 


dolnitBc-dyO and 
setBodyContent^ 

Circumstances under which they 
can he cailed. and number of 
times per tag invocation. 


£ML_B0DV_BUFFERED 


fJEVE^: 1 



566 chapter to 



custom tag ctevefopmen/ 



What if you have tags that work together? 

Imagine (his Mxiiimo,,.vou have h <mme:Memt> c<n thai builds a euitota 

navigalkiti bar. ii needs menu items. So you use a <ininc:Mei:iul<eni> tajj 
nested within the <nuni':Memi> latf, and the menu tag cfcts ahold [somehow) 
< ■ I i In menu items and uses those items to huild the navigation bat. 



<mJ_ne :Menu > 

■tmine^ Menu I ben iteraVa lite- , "Dogs" /> 
Onine ] Menu Item itemValuB="'Cats" /> 
Cm 1 ne : Menu I benn i teraVaIue«"Hor3es" /> 

</mine5Meriu> 



The question is, how d" this i :ljjs ralk in one another? In othei words, 
how ihit>i Mic Menu tag (the enclosing i»<M' 'In- -iKiHinii- values from 

ilif Mt-iuilH'iMH ilir inner/nested tag?)? 

Nested tagi are wed in several places in theJSTL; tin- <cchoote> tag with 

iss nestrrl <C:wbett> and << ttithrnvisr> tags, is ft good example. And you 
might need in use "cooperating lags" idi.iTs how the spec say* It) in your 
own custom development as well. 

Fortunately, mere's mechanism for getting hifb lo and from outer and 
inner la^*, reggtrtBess &C the depth "1 nesting, Thai means ion can gel 

info from a deeply nettled tag out to not just the tag's immediate enclosing 
tag, but tn any arbitrary ttuj up the tag nesting hierarchy. 

n your pencil 

Look at trie Tag API review the previous tag handler code, and think 
ahrmt hnw ronfwating fags might nfll infn In arwl from nn* 1 anntlw 




«rnterface» 



fag yetParsntt ) 
tot doStrtTagQ 

void SBtPageCQiKextiPageContertl 
void ittParent(Tag\ 
iwd reJeasei',1 

1 
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the getParenti method 



A Tag can call its Parent Tag 

Iwilh NllUpkT-l* ■tlld 'I :»!» h:i\<- .1 lJ'..|"-Ml lll'-l||.>.l 1 1 1 ■ - I a . 1 1 - 1 1 : Ml I - ■ Li 

returns a Tag* bul the gctPiircni;) in Simple/Tag returns an instance cf J.ipTag. 
We'll sec the implication h of those velum types in a minute. 



SlmpteTBQ 



«intefface» 
JsfiTsg 



} 



void doTagf) 

Jsp Tag getParertf(i 

void sttlspSodyfJspFragment) 

void seiJspCwjfexif JspCcvirexf) 

void seiParenffJspTag psvnSj 



^jftlBrfece^ 
Tag 



Tag geiParnitf) 
int doSSari Jagf) 

void setPageContexltPtyECrintextl 
vox! setPatBttiiTag) 
vod rsteasef J 



A nested tag can access its parent (enclosing) tag 

<mine ; InnerTag /> 
^-/raine : OatexTag> 



Getting the parent tag in a Classic tag handier 

public int doStartTaq () throws JspException \ 



Outer Tag parent = (Outer Tag) get Parent ( ) ; 

V / U'_l LJlLIt? 1_J J X L |-_| VTXt-U iL 

return EVftL_BODY_I MC LTJDE ; 

I 



Getting the parent tag in a Simple tag handler 

public void doTagU throws JspException, IDException I 
OuterTag parent - (OuterTag) getParent() ; 

// do something with it „> -jtty & e 
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Find out just how deep the westing goes,,, 

Wi pan w,i\k jftxuf way up tV MK««t$r tag chain i>y continuing to eaU 
snl'.irrmO on whatever is returned by getParnitQ. Be au»e getBarcntQ return* 
fiilirr another into, (on which you am call geitfereniQ), or null. 

In a JSP 

<mine : Kes tedLevel > 

< m i na i Ne s tedLe v e I > 
<min&i WestedLevel/> 

< / m i fte : Nested Le ve ] > 
< /mine : HestedLevel> 



In a Classic tag handler 

package fc-o; 

import javax.servlet . jsp. * ; 
iniport javax.servlet* jsp.taGext, *f 
import java.io. *; 

public Crlasif Nes ted Level Tay extends TagSupporL I 
private int nest Level =0; 

public int doStartTaqf ) throws JspExceptlon | 



Tag parent - getParentQ ; , ^\\ 



If it'» h u]|, ti, en ^Ve at the 1^ 

*4 wt dan t have JfJK h t 



while {parent !=null) 

parent = parent , get Pa rent (} ; 

nestLeve L + -t ? . r , L 

l p»* * j-l *"» ***** the 

try I 

pdqeContext.getOut fl .priiitln rvbr Tag nested level 
| catch (lOExcepti an ex) [ 

Lhrr.iv; 8S« JspEXcepticnCTOEXcsptlGr- " * es.tastrinqi! ) ; 

1 

return EVAL BODY INCLUDE; 



+ nestle veil t 



Result 




Tag nested level: 0 
TSlg nested level: 1 
Jul 1 :h.--k l ;I k'U-l. 2 
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Simple and Classic interaction 



Simple tags can have Classic parents 

This is not a problem, because a SinrpteTag** retPar^ntQ fleturns type 
JspTag, and Classic tag* and Simple tags now (bare theJspTag super 
interface. Actually, C&wi tags can have .vw/./, parent*, Inn It taken u 
slight hack to make ihai work because you can*! can a HniipleTan to 
the Titer, return value of the Tafj interface getPELTentl >, W* won't go 
into how lo ;icce»* a Simple tag patent from a Classic child las;*, hut 
all you need to know for the exnm (and aiinu*! certainly real web app 
lilt'] is thai lt> ll-^ii>L' prrtl'arenl':;, :i Classii can ;mv(s> ( -l.i-.-ii: l;m 

parent*, and a Simple tag can access eitbc* a Classic c>r Simple parent. 



• • ,'.\!': "no.':' > 

JspTig 



«infarf*»» 
SimpleTag 



7"^ 



JspTsg geHPajerrffj 

i/ftW sefPajier?rf JspTag parertiy 



Tag 



voW sefParenffTaflj 

8 more 



In a JSP 



Using the g'etParenlO method, 
a Classic tag can access 
Classic tag' parents, and a 
Simple fag can access either a 
Classic or Simple parent. 



<mine:ClasHicParent najne-"Cl a s h ic Parent Tag "> ^ 
<cnlne! Sifitplfelfmer /> 

|f s 0< C* a £-plcTj 5 

In the Simplelnner tag handler ask IV * Cb^ fi«nt 

public void doTagi) throws JspException, IOException ( ^ 

get JspContext () .getOut <| .print ("Parent attribute is: " 4- p&wit.gatName O > f 



I 



In the Classic Pa rent tag handler 

public class MyClassicParent extends TagSupport 
private String name; 
public void setName (String name) ( 
this .r:a:ne=nama f 



i 

public Fit ring getNajne ( > 
return name; 



public int doStartTag ( > thiowa JspException f 

reLurr, EVAL BODY INCLUDE; , „ ^far* £j/|p ftQpy, 
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'If y^u'ffi really curious, look al (he 
TagAdapter class si Ihe J2EE 1 4 API 



custom tag development 



You can walk up, but you can't walk down ... 

There** b gefPtrreiifO metkvd, brit there's wn -get Chi MO W" the 

scenario we showed earlier was for an outer <mvrMcnu> tag that ucrded 
access la its nested < my: Menu I tern > tags. What can we do? How can the 
|i;Lirtii iiiy. (get hifunuatlon about die child tags. wLu-ji a child can get a 
reference to the parent, hul the parent catt'i ask for a reference 10 the i h2d? 




-•^Sharpen your pencil 



How could a parenl lag gel attribute values from a child lag' 
Describe how you would implement the functional ily of the 
cooperating Menu and Menu Item legs 



you are here ¥ 571 



sending info to the parent 



(retting Info from child to parent 

We have two main ways In which tap em cooperate with one another: 

1) The child lag needs info Hike an attribute valuei from its parent teg, 

2) The parent lag need* info from each of its child tags, 

We've already «*en lmu the fir.! M-cnario works the child tag gets n 

rrlrrrnrr (0 it) paveril U»Og grlP.irrrHlj, <lu-ii calls getter mrdmds on iht- 
parcnl. Inn what happens when the p&rctH uvnh info from iln* child? We 
have to do tliL- «rar thing. In Other word*, if the parent need 1 * info from the 
i hilcl, it's the i hild's job to fpyt it to the parenll 

S I nil's tn< .niimn.il i' nii-i li.iimm Jut I In - dm rem 1.1 liml ■ 'in a I mm ; i ■ 

child tags, you simply have to use die same design approach Id get info to 
ili. |iairiii_/r/.w I lie- ehilc! as you do lo ge.1 itilit h'oiii tin- pari'iU in the i.hild. 

You gel .1 reference to the partial toft and rail methods, Only instead »f 
gCltcnt, iliin limr you'll rail Home kind of ,w< or method. 

In a JSP 

<l£ tarjlib prefix="itiine w uri="KathyCla3sicTaqs" k> 
<html><body> 

<bine:Menu > 

tmiue ; Menu I tern itemValue="DogH" /> 

Or i ne : Menu Item i bejnVa t ue="Cats " /> 

Cmine: Menu Item itemVaiue^'Horses " j> 
</mine :Menu> 

t/bodyWhtml:- 



Result 




i lv< r ^v\c m ft*® ****** p ? 
UyU V*. ^ ^ e 
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Menu ami Mem/Item tag handlers 



custom tag development 



In the child tag: Menu Item 

public class Menultem EXtQnds TagSupparl [ 
pfcivttn String itemValue; 

public void setlteraValue* String value) [ 

itemValue=value; 
I 

public lnt daStartTagt) throws JspEnception { 
return EVAL BODY INCLUDE,' 



public int doEndTagO throws JspException 1 
Menu parent » {Menu) getFarent ! > , L 
parent, addMeius Item {itemValue} ; 

return EVAL_PA£1T; 

J 



*-frh 0 d 



In the parent tag: Menu 

public clasc Menu extends TagSupport j 
private ArrayList items ; 

public void addMenuIten est ring ite&l I 
items. add (item] ; 

) 



public int doSt ontTag ( ) throws J 
items - new ArrayLlst r L 

return EVAL_BODY_IHCLUDE ; 



^Exception ! 



public int do£ndTag() throws JspException | 



try | 

pageContestL .geLOut () .prlnt-ln ("Menu j Lenus are; * * items}; 
> catch (Exception ex.) •! 

throw new JspEscept ion ( "Exception i * ♦ ex-toStrino; (tt ; 

I 

// imagine complex menu-building code here.** 
it-turn EVAL PAGE; 
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finding an ancestor 



Getting an arbitrary ancestor 

Tbwt t$ WWJthffl media imm you CSU1 use if you want to, say. skip son if 
moling levels and go stiaifiln to a grandpari-ni or Nomethim; even 
further up the lap; nesting hierHirtiy. The nif-ihot.1 is in both TagSufipor! 
md Siinp|r''rmiSu|jpori (uhliougli ihty have lightly diHnem hrli.ivior;-. 
and it's called fimLAjiccsLojlvjiliOliiMri, 

Getting an immediate parent using getParent{) 

OuterTag parent ■ (OuterTag) getParent O ; 



GeHing an arbitrary ancestor using findAneestorWithClassO 

WayOuteiTaq ancestor = (WayOuterTag-) EiidAnce-s tor WithClass (this , WayQuterTag . class) ; 



fLndAncestorMithClasE (this, WayOuterTag . class) ; 

f f 

The (amminer walks tin' taji nesting Imit.hi liv until n lintls .1 lag ilml* 
an lidsUuioc i»l thin cla*i it return* tkejhft nuc h< i thcrc'i no way 1 « i say 
"skip ilir //fi/ tiitr ynu sec that** an imianrr of VVaj'OutcrTag.cljWi and give 

tiii Lilt' Mt'viia LiiiiLiiU c Histcftu... tiu u Vou FCaLy kiiOw 1O1" ii kill iiiai 
you wanted tlu 1 stnuid instance of a lajj ancestor pf that lype. you'll jusi 
ha\r to gci die ri tuin vahu- n|' ItmlAm L^iorWi&ClaitGj ami (lien 1 .ill 
gfttParcntj 01 tlndAnc^orVVithCnH«f) on ijt 

You will noi Ih' irMed On any dei.iih of using firidAncestarWhbClaasQH 

All you need in know for tin- ex;mi is that il exisl*! 
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custom lag dQvelopm&m 




Key differences between 
Simple and Classic tags 





Simple tags 


Classic tags 


Tag interfaces 






Support implementation 
classes 






Key 1 Recycle methods that 
YOU might imp!ement 






How you write to trie response 
output 






How you access implicit 
variables and scupeO attributes 
from a support implementation 






How you cause the body to be 
processed 






HOW you cause the current 
page evaluation to STOP 
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differences between Simple and 
A* 

Exercise 
Answers 


Classic 

Cey differences between 
iimple and Classic tags 

Simple tags 


Classic tags 


Tag interfaces 


Si^leTag tewfcendt JipTag) 


Tag (enxend* J*pTagJ 
Iterating (extend i Ta^) 
BodYTaj (extent Iterat.ohTag) 


Support implementation 
classes 


Simf It TagSufDtHrt 


TajS^pfort ^implen.enb |te*-atonTag) 

Body1*g£i"p?c*-i (extend* TagEupport, 
implements BodyTag) 


Key Uretycta methods that 
YOU might implement 




doStartTagO 
..1:.- r. r ;i '.j.-if • 

d^fxerBodyO 

(a*d far BodyTag- 
dakt&odyO a«d 


How you write to the response 
output 


ytJspCohtentO.getOfctO pfetfep 

f hp try/tatc^ needed be£ juse SiinpleTag 
i-eUfldt detbve |0E*eeftiW 


j>ageConte*t getOutO-prm-tln 
I wrapped hn a tvy/tat£h 

MOT declare the fd&*iO>xW) 


How yny access implicit 
variables and scoped attributes 
from a, support in pigmentation 


11/iL iL t- L^.- i^lfl -J-t-J 

r*>xn xtic qrivifL. onie*n i 

tnat return J JtpConte*i fwhiih 

it ui^lly j PayCmtenU 


variable— NO I a -.ethed |,k ( ,t 
it with S^fleTagf 


r-l r-i'iAi 1 IJftl 1 ^-91 ICA thai hr%r"l\Ji 1^ Kfi 

processed 


yiJ*pBod/>- inVokefni.il) 


doStartTagf), or 

£l/AL B0&/ BUFFERED if the 


How you cause the current 
page evaluation to STOP 


TVc* a SkipPigeEneeption 


Ret^StfjPjW fr 0m 
doE*dTa & 0 
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custom tag development 



Using the PageCtmtext API for tag handlers 

'J'hi.-i page i* ju*r ii review from whm you saw in the Soript-frvL- ,|>ii*i chapter, but 
ii Domes up itfiiiin here heeaase ii's crucial fin a tag h;mil|rr- A tag handler class, 
remember, is ao! a tetvlei or aJSR ii doesn'l have automatic accent to bunch 
of implicit object* Bin ii ilne* <fi*i reference lo :r PagcCkmiext. ant) with ii, ii 
can gel to tilt kinds of things it miqhl need, 

Renjcmbcr ih,n while Simple tags pet ;i reference [it aJspConiexi ;md Classic 
tags get a reference to n PagcCnntcxl* die Simple tag's JspContcxt is usually 
.1 PageCrmtoct instance, Sn if your Simple tug handler needs arcess to 
PageContext-specific methods or fields, you'll have to ea&i It from a Jspt'umexi m 
the Paget luniexr ir realty » on the heap. 



JspContfixt 



;if :Altribtile(5iring name] 

get Attribute(Stri ng name, in* scope) 

grtAttrilbuteNameslnS»pe[irit scope) 

f i nd AttN btii:«{String nam H } 

getOutQ 

ll more melhods including similar 

II methods to set and remove attributes 

!) from any scope 



T 



PagflContB.it 



APPLICATION. SCOPE 
PAGE SCOPE 
REQUEST SCOPE 
SESSION SCOPE 
more fields 



ti*W* 



getRequ«t{) ^ 

o etSe rv letC onfi g() % "* K<£ rf 
getServletConiMtQ 
gBtSflsaiDnO 

'.' no re methods 



J 



The one-af*) 
gctAttribute(String} is 
for page scope ONLY! 

There are TWO overloaded getAttnbale() 
rirertocfe wrr can e»« on pageCormid: 
a D/w-arg thai WkW a Siring, and a two-arg 
(hdt fa*es a String and an W The one-a/g 

vers** A* a " fte 
attributes bound TOftep^Cwtext ^f 
EM tfW (wo-arg version can be u^d to get 
aff attribute from ANY or Irre four scopes. 



flndAttrjbute() looks in 
EACH *cope starting 

with page scope. 

Vou can expect to be tested on this?' The 
between QstAttrioutefStnitg} and 

getAttr^temng) method foots ONLvl p^ e 

scopes to find a Wng a U<te * n °T 
wde of pag e , request, se &s <on. and appl et 
J returns the first one <t finds that naaSSi 
findAttnbiHe( String) argument. 



1 
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rag fifes exercise answers 




Memorizing Tag Files 

ANSWERS 



FitI in what would you must put into a Tag File to declare that the Tag has one required 
attribute, named "title' . that can use an EL expression! as the value of the attribute. 



Fill in what would you must put into a Tag File to declare? [hat Ibe Tag must NOT have a body. 



Draw a Tag File document 
in each of the locations 
where the Container will 
look fgrTgg Rles. 



This wasn't fart of 
tKe e*ertiie, but it 
wed* to be in he ire 




Directly inside WEB-INF?tags 

Inside a sub-directory of WEB-iNF/teQ$ 

Inside (he META-lMF/tags directory inside 
a JAR fife that's inside WEB-INFAb 

Inside a sub-directory of MEJA-fNFAags 
inside a JAP file that's inside 
WEB-INF* 

IF the tag file is deployed in a JAR, 

■jWn ijti JCT Krt T TV Pi frtr 4*ir-i (on fi.'a 
If rCT C IWLJlJ I £3 T 1_U JUT U «7 UTy HIST. 



Wfcaj 
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custom tag development 




How can ;i Cl;issi( tag handler insirun ihf ccutitiaef m itrnnir th« remainder of 

thcjSP thru invoked ihf taj;;' 
(Choose all that apply, i 

□ A. Tlit doEndTagQ nut hod should it turn Tag. SKIP_EODY 



□ C. The doS tart Tag () im i In »d should ret urn Tag. SKIP_BOD¥ 
G I). The doStartTag () mt'lhod should if mm Tag. EKIPPAGE. 

Which diri'dives and/or standard action* an- appti< ahh- ONLY 
within rag file*? (C^hepse all thai appfyi) 

□ A. tag 

□ H page 

□ 0 Jap.liOdy 

□ ! >. j sp ; doBody 

□ EL ^ 5p; invoke 

□ & taglib 



Q U L The doEndTagO niri hod should rmirn Tag. SKIF^PAGE 
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mock -'. 



A medical vebsile hides, selective content I'rom users who are not roistered. In place 
nl' the hidden content, a message should display to encourage Users to register Given 
tin? Simple ta£ handler snippet; 

11. public int doTag ( ) throws JspException , IGException. f 

12. String level - 

13. (String) get JspContext (} .fineffit tribute (^aGcouritlevel") ; 

14. if M level — null || "trial" .equals {levein ) i 

15. String price = "•?'", // TODO get context parara 

16. String mas a age m "Content for paying members 

only .<br/>"+ 

17. "<a hre£=' J register. jsp">Sign up now for only 

"+price+"!</a>"; 

13 . get JspContext f ) , getOut ( ) write {message) ; 

19. } else { 

20 . get Jsp&ody ( } . invoke (null ) ; 

21. ) 

22. } 

Ai hm l"i. 1 1 1 1 - |ii hi' li i r registration should In- retrieved (mm a rnnu-xi parameter 
named registrationrVe, however there are no methods on JspContext for retrieving 
Context parameters. What ran soli* this pjnbteiE? 

□ A. Ren ii-w ill-- :i|iU' vviih page Context . getServletContext {) 

ge 1 1 ni t Par ame te r ( " r egi s t r a t i onPee" } ; 

D H. Cast the JspContext m '\ |n PageContext so that you ceiii use the 
iiipiIiolIn of PdyeCunLujiL hi retrieve i hi- tu«ti;jtl pwauHclcr, 

D (.'. Re ti-i we the value with 

getJspContext () .findAt tribute ("regis t rat ionFee") ; 

Q 1J, Throw an exception to lei the user know that the price could not he Ibund, 

□ K. Thi* is iiiipi^sihle wiili ;i Siuiple tiiig- A Cl:i^ii lagniw! h£ wed, 
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custom tag (levelopm&M 



Which Simple merlKini.sni will n il ;i.JSP page lo stop pinrc^inir.' 

□ A . Rf I nr 1 1 SK I P_F AGE I 'n« 11 1 h <? doTag fitt ( imd . 

□ B. Return SKIP_PAGE from the doEndTag method, 

Q (.'.. L'hmv, j SkipPageException Jj. -jjl ilh- doTag mi iliml 
Q D, Thrive ;i SkipPageException from the doEndTag method 



Which are true afoul the Clastic tog modcf? ■ Clumse .ill thai 

apply.) 

□ A. The Tag irjtwfajji* cftd only be uied to create 

cm ply tag*. 

Q 15 I he £KIF_PASE constant is a valid return value of 
iJji doEndTag in-, ilnnl. 

□ C. The EVAL_BOD¥_BUF FERE D conatatf is si v.md 

wtwtn valiK- oi the doAf terBody method, 

Q 13. 'I'Im- Tag imn Lil t h [jithvitlo uvu vuliics ftti the remm 

Vfllue of dt>3tjrtlTig -iii- ..I: SKIP_BODV .mil 

EVA1_B0DY. 

Q li. Thti'i .hi three tag In tetfacej Tag. Iteration Tag. 
.mil BodyTag Inn imly tvvo built-in base classes: 
TagSupport, and BodyTagSupport. 
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mocff 



Which are tru<' about the findAtices tor With Class mciinxl in 
ihe TagSupport i ('In him; a!J lhai iippLv. i 

O A. Ir ir-i juir r:i i kite f i;![;inn'l>-f: A Class. 

□ U. It is a italic method in tit* TagSupport .lass, 

□ C". [lis a non-jtadit nn-iln itl in the TagSupport class. 

□ 1>. ft is NOT defined by any b'f thr standard J&t 1 teg 

interfaces 

O I'j. ll i'L-t|Qiri's tWn parameter*: A Tag lie id ;t Class. 

Q l\ [i requires; wnc paramcicr: A String rcprL'&eniiruj ihe 
name ol the lac? to br found. 

CI G, It requires two paramo leu: A Tag lie id a String, 
reprtteortng thr name of lh* tag to be found. 



Which must be true if you waul in use dynamic attributes Ibr 
/ a Simple tujj; liLtndler? (Choose all thiit apply. 

J \ Vmir Simple lag (mmI NOT declare as) statv 
lag a< tributes. 

□ Bt, Ytiur Simple tag must asc the <dyn amic- at tribute s> 

element in the TLfA 



I f~" Villir ^iSTITIllii P 'JiJT Ih'JTuiljkr 111S1S.-1 SI kl 1 1 I J J 111 I ■ SI I P I LJ t 

%J* i L H PT.I-1 4J II I Lj.J ■■ 4 L 1 ^ IIULIU11 I J I LUll I Ell Lj^ IV1JIV III I I l n . 

DynamicAttributes intcriiicc. 



□ Pi Vjjur Simple lag should extern I 1 hi- 

DynatuicSinpleTagSupport class, which 
provider default support lor dynamic attributes, 

□ E. Yipiit Simple lap CANNOT be used wiih the. 

j sp : attribute suitdanl aiiion, hee:iuse Mi 
a< e'iom works ihiK wilh stalk- Liiirilmirs. 
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custom tag development 



Which is true abntn tag files': 1 iChoosr all that apply.) 

□ A. A tag file may be placed in any suhdiiwldi v i if WEB- INF. 

□ IV, A file must tunc ihr lilt- extension of . tag or . tagx 

Q C, A TLD Ills must be ased m map ihf -vuiimlii 
tag attune in the actual egg itfe 

□ l>. A lag file m,iy NOT be plat ed in ll JAR file in the 

WEB- INF /lib d irec tury 



Given; 

10. public class BufTag extends BodyTagsupport { 
11- public int doStartTagO throws JspExceptlon { 

12. // insert code here 

13. } 

14. ] 

Wunir 1 1 1 : l I [he li;is !«•»•« properly ronfifpHrd ■<> rfl«»W hody eoiiieni. 

Which, if inseried at line I ij would came ihr JSP code 

-^mytagHrniytagi-BQdyCoTitent^/itiytaga : inyiiag> r u^m 

BodyContent? 

A. ictum SKIP BODY , 

U U. return EVAL BODY INCLUDE; 

— 

□ B. return EVAL_BQDY_BUFFEKED ; 

□ l> return BODY_CONTEMT ; 
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mock 



Whirh abi nii doAf terBody ( } if, Lrue? [Choose all ihi.it apply) 

□ A. doMterBody 0 is only called on tags 

that t-xff iKt Tagsupport. 

□ B. doAf terBody () is only called (HI tajp 

that extend IterationTagSupport. 

Q C. Assuming no csjccptkms occur, dcAfterBody ()■ 
i& always called alter doStartTagO ft"* any tag 
that tmpli'iitciUs ItorationTag. 

Q D, A^suttiiflg no i L sri'|'jiiMn-: m i in. doAf terBody (} ^ 

tailed alter doStartTag ( ) far ftny tag that implements 
IterationTag .md muni, SKIP_QODY Jn <im doStartTagO . 

Q E. Asjumiug nr> exceptions nirur, doAfter&ody 0 is called after 

doStartTagO for -my tag that implement IterationTag ,nnl 
returns EVAL_BODY_INCLUDE I 'nun doStartTag ( ) 



Oivt-n ,l,JS|' pagr: 

1. <%@ taglib prefix**" my" uri="/WEB-INF/ntyTags . tld" %> 

2. <myitagl> 

3. <*-- JSP content — 1> 

4. </my;tagl> 



TKr tag hmitlhr fat my:tagl a TaglRandler ,md attends TagSupjwrt, 

What happen* when the instance of TaglHandler calls Ow getParont 

method? (Cfejse sP thai appiy.} 

Q A. A JspException is ihrrwu, 

□ \\. 'flu' null vahir neturneiJ, 

□ C \ MulIPointsrExeeptiori i- ihniu it. 

□ D. An IllegalS tataExcept ion i*, 1 1 imwti. 
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Whkh is tnir abtmt I he lilecyde of a Simple tag? 
f Choose all thai apply.) 

G A- TJtt release method i H called alter ike doTag tacthod, 

^ |i. ['hi- setJspBody method is idwiiy* c^lLc-cl before l he 
doTag uu-thod. 

□ ( :. I'll. setParent ,iiul set JspContext ibirTlmiU ;irc i-:i|Sh'lI 
inirwdwtrh licfuvf ihr i.ig ailribuifs arc set 

Q D, The JapFragment of the tag body i invoked l>v the Container 

hefhre lli.'la- LiiiiUn'sdoTag niHlmil l> < -hIIi'iI. J'lii ? Millie, .1 

BodyContent object, is p.i.ssrd in rl h- r.^ lumdVr using flit- 
setJspBody i'ii«-r}iud. 



Given: 

10. public class ExaropleTag extends Tagsupport { 

11. private String pax am; 

12. public void setPar am (String p) { param - p; } 

13. public int doStartTag (} throws JspException { 

14. // insert code here 

15. // mare cade here 

16. } 

17. } 

Which, insetted ai line 14, would be guaranteed to assign ilir value of the request-scoped attribute 
param in the Variable (Choose all thai apply.'! 

□ A String p = findft t tribute ("param") ; 

□ H. String p = request .getAt tribute ("param") 

Q C, String p - pageContext , findAttribute ( " param" ) ; 

□ T i. String p - getpageContext {) .findAttribute {''param") ; 

□ String p = (String) pageContext.getReguest() . getAttribute ( ''■param") ; 
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mock 



Which art valid method calls on a PageContaxt < .1 >\fc\? 
(Ctiooss il>;u apply,] 

□ A. getAtttibuteKam^g (> 

□ R, getAt tribute ( *key " ) 

□ C. findA t tribute ("key" ) 

□ 1) getSessionAttribute{) 

□ I:. getAttributesSaoperkey"} 

□ 1 findAttribute ("key" , PageContext . 5ESSI0N_SC0PE ) 

□ f T . getAt tribute ("key" ( PageContext . SESSIONSCOPE ) 



15 



Wli'nh is l In.- t Jlit it fii JspContext nuiWI tn mil to nt-frss an 

attribute thai i« kmivvn id be in application icope? 

□ A. get PageContext t > 



□ II. getAt tribute (String) 

□ C. findAt tribute (String) 

□ ]'.. getAttributes Scope ( "key" ) 

LI 1\ getAttrxbuteNainesInScope (intj 
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custom tag cfevetopmem 



What k t.lsf bent fitjfiiEt-jjy, when implementing <i outturn tag, fat linking 
ilif value of ■"1 .inriljuir whoste scope fa tmikiHiwiv? 

A. tlheck ail scepe* wiih a sincjk 

pageContext . getAttrlbute (String) i nJl. 

G II Cheek all Hctijjcs wiili h single 

pageCon text . fin dAttr ibu te (string) nil!. 

-J ( '. Unvk each ncopv with calls to 

pageContext . getAttr ibute ( Str ing , int } . 

Q L>. { :,i II pageContext . getReques t ( ) , getAt tribute ( string) . 

Lhen ctiLJ pageContext .getSes s ion . ( J . getAt tribute (String) . 

and so on. 

O EL None of ilK'Sf will work. 



Given \t simple Tag, wtixsj* hiiudlcr is implemented using I he Simple i^g 1 1 1 ■ ■ ■ I ■ - 1 
and ,i tag, complex Tag, whose* handler it; implemented using tlu L (LUnssi-r model. 
Both tags are declared to be nun-empty and non-tag depend em in theTLD. 

Which JSP o-de snippet! are valid uses nf these tag? (Choose all ihnt apply ) 

□ A. <my:. simple Tag> 

<nvy : complex Tag /> 
</my : simpleTag> 



□ H. <my l simple Tag> 
</my : sirnpleTag> 



G LI. <my : simplaTag> 

<%5 include file= J ' /WEB- INF/ web /common /headerMemi .html" ft> 
</ray : sinspieTag> 

□ L). <my ; aimpleTag> 

<my[can-plexTag> 

<% i++; %> 
</my : complexTag> 
</my : simpler ag> 
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Which arc Hue aboul rhe Tag File model? (Choose all ihat apply.:- 

CI \ l',.n It tag fil*' muti have a ijuri^ptinttmg 
entry in a TLD file. 

□ U. \JI directive* alkuved LnJSP pagea arc flUcrtMsd 

in tag Files, 

G CL All dbttfiveii allowed in Tag Filrs iirtr flowed in 
JSP pages- 

□ I) I'll.- <jSp: dlOBody> ,., I .>. 1 1 t ir. , 

used in lag Files. 

^ r. The allowable file e*tei»ionjs for 1% File* an- .tag 
<u id , tagx 

^ F Ebr<adi attribute declared and specified in a Tag Tile, 
the container creates a page-scoped altrihud- with tin- 
same name. 



Which are valid in lag files? (Choose nil that apply. . 

□ A. <jsp:doBody /> 

□ U. <jsp: invoke fragments' 'frag" /> 

O C. <%@ page import='' java.util .Date" fc> 

J R <%@ variable name -givcn=" date" 

variable- class=" java . util . Date" %> 

□ 1-.. <%@ attribute namfi="name" valuer" blank" 

type=']ava .lang. String" *> 



\\ In. h u-iunis the enclosing tag when cajkti from within r tag handler claw? 
(Choose, nil that apply.) 

Q A. getParentf) 

getAneestor ( } 

U <.'.. findAncestor ( } 

Q t). getEnclosingTag () 
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Given a web application UTuctore 



/KEB-INF/taga/iaytag's/tagl . tag 
/w£b- rUF/ tags/ tag£ . tag 

/WEB-INF/tag3, tag 
/ tag4 . tag 

Which tags could he (i«d by an appropriate taglib dim live. 1 
.Choose all thai jL]jp|v.,j 

□ A. tagl.tag 

□ IS. tag2.tag 

□ CL tag3.tag 

□ li. tag4.tag 



A well application includes many forms tot m^n to iill am and submit, gibing 

in I lie pages indicates that a fit- Id is required. Business derided dial n red astrrrsk 
should he placed preceding the text labels nf required fields bul the pmject 
manager is contending that the background color pf required fields be light blue 
and another department is demanding that the project'* application be consistent 
-. 1 1 1 1 i]n'ir [>vvii. where (lit- n-xt nf the label* be bold for required field*. 

Considering the diiTereni perspectives on how required fields could he identified 
in pages, choose dot most maintainable usage of a rustom tag. 

□ A <cujSt;xeq%iiredIcOn/>First Name; < input type="teKt" 

name- "fir a tNaroe" /> 

□ |. <cust:te:«tField label-" First Name" required-" true"/> 

D C. <cust : re qui red Fie Id colot="ted" symbol-"*" 
label="First Naae"/> 

□ |) <eust:required> 

First Name: < input type-" text" name-" firs tNameV> 
</cust : required> 
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HoU h - : i ■■ :i ClflSSk fcftg h:ii!fllr[ iciM rlJi'l \\\v. miiliiim-v (0 LgtlOF* & I ft I i.iindcr <if "^"^ ^ 

1 iflC.f.S? lh:it imnki'il llh' Ug? 

□ A. Tin doEndTagO method sjwutd muni Tag, SKIP BODY ~ 4 ^ a ^ v * uC 

B. TV doEndTagO mrtlitjd should rmirn Tag, SKIP_PAGE 

_ --Option C is invalid beuuie it 

□ C. The doStartTagO mcdicd should retm n Tag, SKIPBQDY. eh |y ^ wet th e body of ttie 

4*5 to be skipped. 

G L). l lif doStartTagO mrthutl shf>ulfl ]i nil n Tag, SKIP_PAGE -Ofhen £) af'rf b 

W hkh directive* and/or nduulaid actions arc applicable ONLY (J£P vl.O <™ 

^ within la^ files? (Choose all thai ,'tppiy.i JSP vlO section ^11 

03 A. tag -O^o* A .* valid (pg l-TO JSp vlO section 5 13) 

^0pW B ii tarfU bewuse the fay d«r«d>e is 
U b. page ne ^ f t(| 4 ^ £| c ^ J -17*??- 

rfl). j S p:doBody - Oftiw, D « «Nd (fj W2JJ. 
^ I-., jsp: invoke £ ft ^ ^ Mf?) 

□ [■ taalib -0pW f >i ih-alid b^fluie iht ta4b directive 

* t3h appear in EITHER a bij file or JSP 
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A medical website hides selective content from users who art not registered. In place 
of the? Hidden content, a message should display to encourage users to register. Given 

[Ik* Kll|3p|c t:'if" IkiiifcnJI^'i tEilppi'f- 

11, public int doTagO throws JspExccption , IOException f 
12 , String level = 

13, {String) getJspContextO , CndAttribute {"accountLevel") ; 

14, if( (level — null II "trial" .equals (level) )) { 
15- String price - ,h ?"; // TODO get context param 

16, String message = "Content for paying members 

only .<br/>"+ 

17, lv <a href- ''register . jsp">sign up now for only 

"+priee+"!</a>" r > 

18. getJspContextO ,getQut() -write (message) ; 

19. } olsa { 

20 . get JspBody ( ) . invoke {null ) . 

21. } 

22, | 



At line the price for registration should be retrieved horn a context parameter 
named regfetrationrre, howi'vet their air im hh iIuhK oaJspGamext lor retrieving 
context parameter* Wtwi can solve this problem? 

□ A Rriricvc tint valttc with pageCorrtext.getServletContextU 

.getlnitParatneterC-'registrationFee"'); 



-0pW & "t*ie payCemle*t 
variable it only available -to 



ji. ( Iir >7*ipCCj |r lt(!5Cfc to Wp'. - P J ggf^nn fenar f . suv tjial ymi CU!\ !ISt the 

methods "I" PageContext i<> rettfev* the e cm parameter; 

Q G, Retrieve the value with 

getJspContcxt{) .frndAttribute ( "rcgi strati onFec " ) ; 



-Option B Correct We never 
d tWa few 3 nei V" 11 
ww'-fe need hi know rb for 

1 1 - . .. L. 1 -.i _J.k»i jjjtoj 
in njndy m tbe reil world? 

-Option C Remember, 
* t V< not locking W ** 
aHribifie, we're looking 
lor a ttmlcmt parameter 



□ D. Throw an exception to Id llit* user bum that (he price could nm be lbuiitfptioh D Dor/i ^ive up jo 

easily' With drter^ihitior, you 
ta> Provide a q<?od 5fllu"tron' 

LI C This is impossible with <i Simple A ClaMic lag muM be ilkccI,, 

-Opto* E ii not iwpo^ble, y.si fatty 
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£ W'hkU Simple tag itK-dtaTiism will tdl aJSP page m si<»p ptttemmffi (JSP 

□ A Krim -ii SKIP PAGE (min llie doTag iwthnd. ",2th3 do» hot tewTviLe ^ 33 

□ I!, rV1.m11 SKIP_PAGE IV* mi ilsr doEndTag i ■ i • i L i .<l B u mvjJ'id Wfl^c & S™fle 

ta^ does not bivt tbe do&ndTaj 

El C, Tlmm :i EkipPageException Inmi ilif doTag iin ilnnl 

ii invalid because a 

n „ .... , Si "^ !e ^5 do ° ^ ve w« 

l_l 1). | |inm- li EkipPageExcoption ironn UK doEndTag m.-iluttl. dothdTa^ evert metWcd 



Which an- true almm ihc CIasmc tag iiukM.' (Cw0W! all thai " | |^ 

apply) 

□ v. TIwTagibterJj m only beifted to cw»te -i>pbo* A * bctit.se '"^rfate 

empty tag*. can *«ppw-t f »W t •* r u , e *V t 

iterate or jjtti Mtts* to &e b«iy «o»tot 

IS. Fit* SKIPPAGE 1 DBitsfll i- a valid return value df 
iliM doEndTag nu'ilnnl. 

-Aftton C ii invalid be£3u*e 

□ < I In- E VAL_BODY_BUF FERE D <'< iFi*lau I i- a v<,Ei<l dflA-fte*&odY 

rutum value of tJie doAfterEody method. SKIP 0CDY «" 

u I.J, 1 'fit: Ta^ IfcuZ-jjuCO Only pmYiCiCb iWp YLihiCS IuF tlit" rtiiiiii 

value of the doStartTag method; SKIP BODY and -Option D ii invalid becauie doStartTag 

return £K[P BOD/j^d 



E. Tht-rr ate 1 Krcr lag in ferial — Tag, IteEatiotlTag. 
and BodyTag bui only two built-in. base classes: 
TagSupport. ,u:d BodyTagSupport. 
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Win. h in- lidc nhnin 1 1 n- findAnces torWtthClas s nn-lhi>tl in tJ£P ^ 

the TagSupport rChonsr all thai apply-) 

—} \ 1 1 rcqnire-i firii* pjirnmi'tpr: V Claaa 

ST B, 1 1 :> itstfc rm-ihud. in the TagSupport < -lass, 

[X CJ, 1 1 is li Bea-atfwfc method in the Tagsupport class. -Oft"™ C * beiau« Ue 

B i). li i* NOT dffiiiKri by any of the ttandanJJSl* i#g 

illK'tfiiicv 

19 E. It requires two parameters: A Tag arid :i Class. /u,^, a , , r 

-J K li i i i f ui i p pju^tneter; A String- representing the the method takes pava*.dtm. 

rmnic of the lag to be found; 

□ I Hopes twin ifi ri-: A Tag :mcl ;i string.. C'p L \tm A 

rcprcitflthtg ilir matte trf the tag to Ik- finmd. ftj^ftTjqZ * * c£ * l,d 



(JSP *lO itetlw f*.» 

Wbidi must be Irur il' ynii want lu usr dynamic attributes i'tir 2--~7'V r "? , 5) 
ii Simple tiijg iiEmdk'r? [Choose al! that apply.j 

U A. Yuiir Simple tag most NOT declare any static £ ^ both ststit *^ ay*^ 
tAg attributes. attr'iku-fcei n Simple t*} 

Ysutr Simple hum usr il.r <dyn ami c- attributes^ 
ctcracjil in the TLD, 

C. Ycior Simple (:ig handler must implement the 
DynamicAttributes interlace, 

-Cyt'or, D it k^lid betswt there n 
D 1). Your Simple lag s|hjuI(] r\tnnj 1 1 1 1- no suth helper din m t*ie tailt-in 

Dynamics impleTagSupport i l.ivt. whidl ^Pfs- 
pmvitle* default support li>r ilynamir MtribtttiW. 

□ li. Yuur Simple ta K CANNOT he used with ilu- f * ' r ? Jl<J b * iJwe ire 

jsp: attribute sumdord B t. because Hit* TJ™ | .^fjj 11 *^™^ Jttimi 

actfcn worka only with staiii :iurihiiie.$_ ' 1 9r 
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g Which is true about lag lilcsV (Choose .ill lb at apply. I 

-Oft.o* A * ^vilid btiause 4m fijg 

□ A. A lag file may be placed in any subdirectory of WEB- INF. be flawed *"*der ihe WtD— lr*r/ 

* H - A lH * ,i|r - 1111 ll!< ' ' ta 3 ■ ta 3* ^ ie „ 8 " t*re^ ( n l-ffo 

□ C. A TLD mum be ttsed to map Are lynibolk 

t:i« iiiimr t<» "Ik- filial tut, file. -Option C it irvjjid became ta^ njy be 

disCtffcrtd b^ Ue 



Con-baihcr reiture is optional 

□ D. A tug fil* rmiv NOT be placed in a JAR file in llic 
HEB-lHF/lib directory; 



(fee* WSP.W>r*t-« 

10. public class BufTag extends BodyTagSupport { 

11. public int doStartTagO throws JspException { 

12, // insert cade here 

13, } 

Asrttfne 'hiii i lit- t;ig has been property configured l ■ h allow body content 

inverted »1 litif 12, would cmhc the. JSP code 
<roytags :mytag>BodyContent</mytags :mytag> m ' mi 

Bodvcontenty ^ „ ^ beMgse d. «-c> tb« 

J A. return SKIP BODY; ^ tbe taj be stti^d 

Of H return EVflL_BODt_iNCLUDE ; 

□ CL return £VMi_BODY_BUFFEHED ; - Option C is invalid be£Jui e it directs the body of 

□ a return BOOT JXtSTHHT ; iKe ^ ^ J kfftr ^ 4*v r«± frrta* 

-Ofti* D ii lnva | lt i ^ fc 

not J valid ^rr, Code 
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Whkh afemtt doAfterBodyO t& tn*? fCfaoew ill tfesU ^>ply,j g£P * 2 -° H M?2J 

Q a. ---^ 

lhi " ^' ,,|Ml T ^ Su PP° rt li^aWT^ k&Mt*. 

□ l!. doAfterBodyO is onh railed on tags & * i^jlid bei**« Ue« « 

1 1 j. 1 1 ■ x ■ ■ 1 1 : 1 IteraticmTagSupport. n0 t | asi . 



LJ C Assuming uo fs,i finiim-. .uciii; doAfterBody { ) 
\» always called after doStartTag() for sfiy tag 

thin implcrnnii. iterationTag. _0ptwK C A»d D arc h*a*d 

fcwdause doA^iwBodyf 5 li only 

□ called *:lien doS-br-btapO tttirni 
H Winning (m «*xcep|]ims t>u in. doAf terBody ( ) c E^L dOV^ J^CLWPE- 

called after doStartTag () for ans tag thai implements 
IterationTag and ctftirtts SKIP_BODV litera doStartTag 0 . 



K. ^njoming mi i em . ■ 1 1 s i i m.-H tx-ciii-, doAf terBody ( ) h CaUed afte* 
doStartTag (} ji n tuty lag that ImpleTntrrtt-i IterationTag :irnl 
rHurn*EVRL_BODY_IBCLUDB In km doStartTag () 



1. <%@ taglib prefix=i J 'my" uri""/WEB-l»F/ayTags . tld" 1> 

2 , <my J tagl> 

3, <*-- JSP content --%> 

4. <./my; tagl? 



The tnu liiiudkc I"]- my; tagl i* Tag 1 Handler ;mk! i:xu-nd* TagSupfjon, 

Whal happens when ilie instance of Tagl Handler rail * the getParent 

im-llmd? (Choose all thai apply.) 

A. A JspException is ilirwi. 

U I'ii. null v.ilm i, i . -i ii ncfl 

G i.: A NullPointerException i- iljinvh-ji, 

□ II An IllegalStateExcaption i*- ihromi, 



ytParent i*e4W does mtft tWow a*y 

eiMLtf ton* 
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y\ Whit 1 1 is 1 1 in ,ih. .hi (he lilivyi-lc of ;l Simple tajj? 
[fehoo*a all that apply,' 

□ A. Therele asc method is esillecl alter flu- doTag method. 

m B. Thr setJspBody method is always called before the 
doTag iiiciliorl 

ST D, TS* eetParent ;ith:£ setJep Con text methods .in- billed 
iminrdiiilrly before the tag attribute* are sel. 



C JSP vlO Kiticm J? ^ 



&™plc -U^ to ■« "lea* WW 
-Option 0 is invalid htldost the 

wtOjp^y „ h8 t ta |j eti if 

Simple ,J *, eB1? ty tjj 



he jspFragroent oJ'tlir r;^ h<jdJv in iiutiked by liie Gontabei _/vl ft 1,1 
WW U* m lumdkr". doTag o*«»od is called, tJfc whlfc » Stf^TfiSyE ft* 
Bodycontent 1 kject, n pasxd to ihr lag Witfler u*og the d^Tii^ ^ lei»eid?W> NOT 



set JspBody method. 
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i- ; 



.mi: 



(jep re i-2-7> 



10. public class ExampleTag extends Tagsupport { 

11. private string par am; 

12. public void setPar am (String p) ( param = p; } 

13. public int doEtartTag () throws JspException { 

14. // insert code here 

15. // more code here 

16. ) 

17. } 

Which, Buerud at One 14, would be guaranteed t<» mssijj u ilte villus of tin- request-tcapcd attribute 
mi ill? liMii] v-.iri»L»l«: p> (Choose -ill dun apply-) 

request . getAttr ibute ( "param" > , ^ ^ 
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□ A. String p 

□ H. String p 

□ C String p 

□ ft string p 

ST I". String p 

chapter 10 
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-0fW C B invalid bemuse jr. 

pageCQntext.findAttributef-param") ; |r ^ ^ be 

fowd btf*e ttetkinj *f\vtsi stspe 
getPageConteKtO . findAt tribute {''param") ; -0fW D n invalid bfidni* 

(String) pageContext-getRequestU . getAt tribute ("param") 
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Which Utt Viilisl tTU'lliinI c-pilts on a PageCotitext olijrci? [j^p „2i0 2^331 

(Choosr all lh.;ii apply. 

U B getAttrlbute("ltey ') A a*d D *e i^I'd 

5^ t : CndAttrUsute ("key") betake the« arc no i^rtKodi 



E, gctAttriiutssScope ( "key" ) 
^ ( ; , ge tAtttibutft ( rt k(ty " , PageCon text . SEES IONSCGPE J ^ ^ ^ cKfe par^eicr 



Whkh ts the mosl eSkjeol JspContext method i» m ^o i.-hh an 
attribute llial 14 known Co \>r in apphcalum scope? 

□ A. getPageContext £) ^l IOfl , E lp ^]id Wa«.« tkert is *tkl »ethod 

□ H getAt tribute (String) „0pt,«, B » ir>val<d beta^s ^ -«^<* 

looks m pay stopi 

□ C. findAttriiut* (String) ^ c ^ ^ ^ ^ ^ ^ (ff 

iHj* Option p betawe it f.«t thedc* the otfceir three itc^i. 
13 ]> getAt tribute (string , int) 

□ % getAttriUute&seope("Icey") '^'^ &^*alid beeju* * 0 

□ K getAttrxbuteNamosInScope (int) "f^o* F 11 '^'^ * "ft tte 

kini sttp in a prcfiew that would be rrueh le« 

eff iAk*t tH*. Of^cn D 
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f JSP *3~° ft" 

Wlisii Is the bell •ii atcgy, when implementing a tifltOfn tag: lur iinding 
the vajup itti aLlrjhuU' ivlum' s*TNpi* is mik.nr>wn? 

LJ A, d'-hcck all acitjpci with n tingle ~Owkitm A ii 

pagaContaxt » gatAt tribute (String) < .,11. „, e thed cnly tHe sto ? e 

S3 H. Chrtl sc<jpea uiih ;i Single 

pageCon tax t .findAt tribute (string) 

LI (,. Gto** ttach scope with i rfb to mva | id ^ 

pageContext . gatAttriiute (String, intj . | ess effii^t tW s^ely 

□ 1). pageContext. gatpaguast (> getAt tribute (String) tJM™g IterfAttrfMaD 

then call pageContext .getSess ion () .getAt tribute (String) . 

iUltl SO III]. 

□ 1". Ntnir: df these will work. 



vf given a tag, simpieTag. whose handle* is Implemented usirtfl the Simple tog mode] j ^} 

aod a ta& compiexTag. w£io*e hangar is Implemented tiakg the Classic Eag modd, 
Keih ln^i nit' Hlt'<-|;irt*tt inni-fiiipry arid flftfr-t&g df/pendcril in thf'TLI). 

WHkh JSP code raippeti are valid uses of these tag? (Choose al] thai apply*) 

A <my : simpleTag> ^flptis* j\ is iorrettj » Stf-fle t*5 irfy i-AjJt 

<my : complexTag /> a Comple* U% the body ai lerj as thai U|J 

</iTty: simple Tag> teuton* r* tariffa) tode 

□ H, <iny : sinipleTag> -Option B a iw^'d btfSw* W " nr "jt 

<%- display Text %> hage a body that "Ad is * e*p*-eiii<w< -tig 

</my ; simpleTag> 

i£l f.' <my : *i»if)l^TAg> 

<%fl include file="/WEB-INF/web/ common /headerMenu . html " %> 
< / my ! 3 imple Tag> 

-0Hion C « ionrett becaw.se the <ntli*de directive is. processed 
be W tiie body of the si-pleT^ is £o*wied into A Jifr>to»*nt, 
J J I -day r 3iiapleTag> however, the iwiUed intent mwtfc also be ncf^striptin* (which is 

<my : comploxTag> 

*hy th.* e^plc ,^Ldei to HTML «3»tnU 

<% i++ ; %> 

</ray:cornplexTag> -Cfbo* D is ™i invalid beitose o( tK< £o»flnTa« 
</ioy : simpleTag> utfu fj5 in O^hm M but be£Ju« the c™>, F f eit T« 

body has itvip-ti^ tode in it 
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□ A. B^^^-n^-*, ^^^^^ 

□ B. AlhJu^ve* mo*** to J*l* pag* allowed _ 0 . g „ ^ ^ e 

511 ^ H,s direct* is U available in T*j Fife. 

G C; All tlimuivirs iilli iwt'd tn I'm Riei are allowed in - , * . . ... 

j> attnbutti and variable direfrUet art 

0 1>. Tin' < j sp : doBody> KRiidai'd M&oa cflj] bafy lir net available in j£p 

uwd in Tug Tilt's. 

lid The «ltttwable fife csEembns fai ragHfesai* t*flf 
iirid . tagx. 

i^" I hn ; i c ■ I i inriiljiiic cfedared and sppcsnVd in a THgFife, 
the gafltaincf irri<tt.-s a pagc^segptd attribute with the 



--iiin niiiiic 



^ Wliidi are valid in Km Gfea? \Ch<w all thai Bp-ply] (JSP T5" 

Ef A <jspidoBody /> 

<3$p: invoke iragtnent="frag' /> 

□ U. <U page inporfc=" java.util,Dabe" %> -Opto* C «* invalid betake the f^e 

&^ I) <*@ variable name-given-" date" " nfli rtUi ™ ^ 

variable- class-" java.util .Date" 

□ I'.. <$& attribute namie="iiarne" value= "blank" -Ofimn £ is invalid b f ;^s{ ihenr is 

type=' r java . lang . String" *> ■» aU*ib«te defined (or ^< 

atfrttwi^t d>ret-tive 



^ri \\ In. L r< mum- the eftcjoftfttg tag when <;i]|e<l IVoni within a teg handW dam? (J£P V% 
*^ (Choose afl that uppljv) 

5/ A getFarentO -^Option A is esrreit 't * 

□ B Betineestorn ^ e eme Jr metWs 

LI (.;. flndAncestor () 

□ \\ getEnclosingTag (> 
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<Mvrn .i wcl> application structure: jjgp „^0 W$ 

/WEB -INF /tags /my tag 9/ tagl . tag 
/WEB- INF/ tags/ tag2 . tag 
/WEB-INF/tag3 . tag 
/tag4 . tag 

Which tags rauld 1x» used by an appropriate tagl lb directive: 1 
(0homB nl I thai apply.) 



V tagl , tag 

Ii tag2.tag 

□ C. tag3.tag -OpW C Shd D art invalid We**: ^ flle < 

□ D, tag4 . tag ^ ^ tab dire^y of /Ir^B-IMVky. 
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A web application includes many ibrms Jbr users to fill out and submit. Nothing 
in tlit- pages indicates that a Held is required. Business do ided that a red asterisk 
sImhiIiI In' | jI.k '■I I | .' M ' i i ■ 1 1 ii i u ill' li'Kt lahilv i>1" rci jtliiril tifld-. Inn lln jimjei t 

maaa^et extending thai (be background color: of retfuired felth b* Hghi blue 

.Hid ;inotlier depart incut e* demandim; lh;u tlir project's application be cbn*istcOl 
v. iih 1 1 ii- n imn, sslieri- (hi 1 i«'.\l nt the |.iU I . be I M >|i | [or required lields. 

Considering the different perspective's on bow reqUirtd fields coiilrl l>e identified 
in pages, choose the most main in in able usage of a custom tag; 

□ A. <cust:reqiiiEadIeon/>First Name: <input types" text" 
names" fir stHarae" /> 



I, 

□ C. 

□ h 



-Ofbon A would work ($ you 
tnew. that the re^h-ed f, «|rf 
would always be marked with 
a pvetediw) ivwhd and the 
only potential rta^e would be 
the identifier used E^e* still, 
H: TMOtald be just as tmy\ e to 
we an i»3 tag a*d twap out a 

q>T lion ih 3n imAili»< diw/*— ,u 

-j " J 



<cust: textFieid label-'Tirst Name" required-" true "/> 

<cust: roquirodField color= n red 11 synabol=" *" 
label= "First Name 11 /> 

<eust:re qui r ed> 

First Name: < input type- "text" naiae-"flxstNaaie"/> 
< / cue t ; r equi ted> 



^tu*, B w the «*ort flexible 
solute Vour tuiW tag u gi«» 
-full tontrol far tomWM t>* 
label a«d t<*t f ield and how 
they should be delayed 



^Oftiofi T> it would be posiible do thing* 
this way but your class i™plei»ent»><j tbe tM 

would Wane to parse the body 3rd widftfafa 

rt, tvtatirg a *aiTitehanc< n.^hWe 



-Oft** 0 specify^ a Color 
and symbol in the taj ii 
Kwatisfifitory solution, « a thdngt 
to either of these value* wodd 
fe^uire you tp update the values <u* 
e^ery taj bi every J£p 
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11 web app deployment 



Deploying your web app 




tm proud of you father! Your 
deployment descriptor -looks perfect— 
you've configured error pages, welcome 
files, servlet mappings... but I'm not sure our 
clients will appreciate the subtle irony 
of your ".die" ond ".kidkass" 
extensions, 



Finally, your web app is ready for prime time. Your pages are 

polished, your code ie tested and luned, and your deadline, was two weeks ago 
But where does everything go? So many directories, so many rules. What do you 
name your directories? What does the client think they re named? Whal does the 
client actually request, and how does the Container know where to look? How do 
you make certain lhat you don't accidentally leave out a directory when you move 




DO for error pages. 



welcome files, and MIME types? It's not as bad as si sounds.. 



L|i|& in 3 new chapter 
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official Sun exam objectives 



Weh Application Deployment 



Coverage Notes: 



2.1 Construct the file and directory structure of a web 
application thai may contain (a) static content, {oj 
JSP pages, (c) servlet classes, (d) the deployment 
descriptor, (e) tag libraries, (f) JAR files, and (g) 
Java class files. Describe how to protect resource 
files from HTTP 



This objective has been cowed throughout tht 
hook in other ehaptns. to mo.il of tiir ((intent in 
this chapter tetntrd to this ubjedii t is eithet J'or 
mitto ar in huk itl taititl/ting in n (itilr mure 
detail. 



2.2 Describe the purpose and semantics for each of 
the following deployment descriptor elements: 
error- page, init-param, mi me- mapping, servlet, 
serviet-dass, servlet-mapptng, servlel-name. and 
welcome-file 

2.3 Construct the correct structure for each of the 
following deployment descriptor elements: 
error-page, init-param, mime-mapping, servfet 
servlet-class, servlet-name. and welcome-file 



Objeetiits 2. t tin<! 2.'J focus oiaintv iHt pick\ 

XMt tog ittttrili rttetti to shr [irphymtnt 

Descriptor. [Vtlilr thlA U pinbflbly the least fan 
part of ihr book \mtd t/ir rvtrm), most \ij this 
tvittrtii is easy to Understand and it's just a 
matter of memorising the tags. 
There is one tricky part, though, and ive'ti spend 
Must <•/ '.id lime on it— mvtet mapping. 



2.4 Explain the purpose of a WAR file and 

dtj&cribe !hc contents of a WAR file and how 
one may be Constructed. 



6.3 Write a JSP Document (XML-based syntax) 
that uses the correct syntax. 



Wt derided to stirk this objective into this \iiapter 
for two reasons; I i most oj thi* chapter has to 
do with XML, and 2) wt didnt ivant to add 
anything e/sr into the jSF (hapten. We decided 
it was b/ttri j'oi YOU U> lOneenlnlie mpH thr 
U'f//rt\ and betuii'Hir of tilt the ntJiri pints nj 
JSli ruthri than also uvrrying about the XML 
rrrsiiinj oj errrythmg. tint no;c that you're, you 
kriois, an expert... ice figure yea iein handle it 
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The Joy of Iteployuieut 

Wc'w covered mo« Ot' the Inn stulT, bu( now it's time for a 
more detailed took hi deploy-rum l. 

)n this chapter* ymi iH i fl td think abrjui three main kstipti 



0) Where do YOU put things in the web app? 

Where do yDJ put sialic resources? JSP pages'? Servlet csass files? 
Java&ean class Cdes? Listener class files'? Tag Files? Tag handler 
classes? TLDs? JAR files? The web xml DO? Where do you put things 
that you don't want (he Container to serve? (In other words, which parts 
of the web app are protected from direct client access?) Where do you 
purwelcome" files? 



(D Where will the CONTAINER look for things in 
the web app? ~ 

Where will (he Container look when (he client requests, an HTML page? 
A JSP page? A servlet? Something tfiat doesn'i exist as an actual 
file {like. BeerTestdo)? Where will ttie Container look for lag handler 
ctasses? Where will ihe Container look for TLDs? Tag Files? JAR 
files? The Deployment Descnptor? Olher classes my serviels depeinf 
on? Where does Ihe Container look (or "welcome' Res ? (Obviously, 
once you know all of this, then everything m number T becomes a 
no-Drainer) 

(5) How does the CLIENT request things in the 

What does the client type into tie browser to access anHTMLpage?A 
JSP page? A servlet? Somelhing ttiat doesn't actually eras! as a file? In 
which places can the client make a direct request and in which places 
is the client restricted from direct access to a resource? What happens 
if the client types in a path to only a directory, not a specific Re? 



you arc hem n 603 



where to put things 



What goes where in a web app 

l ii wwral diiipri-i'fi of this book, we've looked at the loraium* in wfekJi the 
\;iriiuis files hum In* phut-d. In iIh- ijuipirr on rusiom trigs, for example, yon 
saw linn T.jit Files tTiHrft l>e d t.-|i|<Ny*-d in /WEB-lNF/ta^ or ;i subdirectory; in- 
in a JAR file under /META-lNF/tags or a subdirectory If you pm a Ikjj File 
anywhere else, llic Container will cither ignore it or treat it us stalk content 
ready to be served. 

The. Srrvlct and JSP specs have a lot ol' picky rules ahonl where things go, 
and you really do need to know most of ihem. Since we've already covered 
nioM of i his in one way or another, we use these first IVw pages as a ted of 

Y'ollr memory iind lliiflrv,l.nnlin«. l>on'[ skip il! Trc\il llirsi- next few ]himcs .is 

\>r;u tire exam questions! 

Why should I have to know where everything goes.,, isn't that what 
deployment tools are for? Or even on ANT build script? 

If you're lucky, you're using a J ZEE deployment tool that lets you point and 
click your way through a soiici or wizard screens. Then your Container uses that info 
to build the XML Deployment Descriptor (web.xml), build out the necessary directory 
structures, and copy your file* into the appropriate locations. But even if you ore 
lucky, don't you think you need to know what the tool is doing? You might need to 
tweak what the tool does. Vou might need to troubleshoot. You might switch to a 
differenl vendor that doesn't have an automated deploymenl tool, 

A lot of developers use a build too! like ANT, but even then, you still need to tell ANT 
what to do. 



V^, But i ju s t got an A NT bui Id script off the I ntern et, and it 's. a( ready 
configured to do it all for me, 

A: 

£\ Aa<i in. Tb.il \ tj real — butyousrill need to know whai'i feally happening. 
If you're completely at the mercy of your tool, you're in trouble if something goes 
wrong. Knowing how to structure a web app is like knowing haw to change a tire- 
maybe you'll never need to do it yourself, but if it's 3l00 AM and you're in the middle 
of nowhere, isn't it nice to know you con? 

And for th os e of you taki ng t he e*a m, w ell r you don't have a cli oice. VI rt ua I ly 
everything In this chapter is covered on the exam. 
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Name the directories 

Write ttie correct directory names in, given Itie fifes shorn 
witftin Ihosa directories, Everything in here has been 
covered in an earlier chapter, but don't worry if you haven't 
completely memorized mem all yet. This is the chapter 
where yoj have to ton it In. 




NavB*r.tag 



fee. My Tfl^Hahdiftf 1 . class 



bar.My Handler.:: lass 



catg ggTogs.tld 
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ejrefctse on deployment 



irpetl your pencil Draw the directory and file structure 



LooK at ihe following web app description and draw a directory 
structure thai supports that weh app Fte itirp in ini-li irift the files tnn 
There may be more than one way to sfrxiclure this; we recommend 
using Ihe simplest h.e leas! number of directories;, to organise it 



Application name: Dating 

Static content and JSPs: welcome. html, srgnup.jsp. search.jsp 
Servlets: dating Enrol I. class, dating .Search class 
Custom lag handler class: tagC lasses. TagOne.dass 
TLD: DatingTags.tLd 
JavaBeans: datmg. Client class 
□D: web.xml 

Suppc-rtJARfiks: Dahn g Ja r.jar 
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BE ttie Container 

Wliafs wrong with diil deployment? 
lliere art; several thing's hart? thai 

I ( do not Follow the Sjervfet or JifF 
\ Specification for where Lhey skrnjd 
be placed. Assume thai all 
Files have the correct 
feLdl ' names 




Lust everything that's wrong 
with this picture 



use 




foe. htm 









Classes | 







TLD& 



Header.tiag 




fan . A dviser'TogHknd kr class 
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exercise on ■iployment 



arpen your pencil 

ANSWERS 



Name the directories 

To deploy a web app successfully, you MUST follow (his slructure. WEB-IN F must be immediately 
under the application context ('MyTestApp" in this example). The "classes" directory must be 
immediately inside J WEB-INF" Trie package slructure for the classes must be immediately snside 
■classes" The 'lib" directory must be immediately inside 'WEB- INF" and the JAR file must be 
immediately inside W The "META-INF" directory must be immediately inside the JAR. and TLD 
files in a JAR must be somewhere under 'META-INF' (they can be in any subdirectory, and TLDs" is 
not required as a directory name). TLDs that are NOT in a JAR must be somewhere under "WEB- 
INF\ Tag Fites (files wjUh a .tag or .tagx ertenston) must be somewhere under "WEB-INF/Iags" 
(unless they re deployed tn a JAR. in which case they must be somewhere under "META-INF/tags"). 



fra **< be »t the 
#*m$ tk*t «4*fe 

Fta Mad 



Tk* pp MUST be "^Tft SUf'^ 



1AR t>« J ^ T» 




_ i : ii 

Dar My Handler, class 



cotalagTogs tld 



fw.MyTagHondier.dass 
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arpen your pencil 

ANSWERS 



Draw the directory and file structure 

Tine only things that couJd b* different in iriis picture are 1) the static content 
and JSPs could be m a subdirectory under "Dating", or bidden under "WEB- 
IN F and 2) the Dali.ngTags.lk! could be in a subdirectory of WEB-IMF. 



Application name: Datmg 

Static content and JSPs: vvelcnme html, signup.jsp. 
search ,jsp 

Servlets: dating. Enroll class, dating .Search class 
Custom tag handler class: tagC lasses. TagOne class 
TLO: DatingTags.tid 
JavaBeans etas*: dating .Client class 
DD: web.xml 

Support JAR fifes: Dating Ja r j a r 




rt tJSwm eMa* 
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exercise on directories and fifes 




BE die Container 

Answers 



Several iWmy. are urotvj with {Wn picture' 



useTug.jfip 



£K f jlfkou^ii accessible 
only by other- part* of 
the web app- m> direct 
jticsi by tiifnb) 



TKe "I*" dfrttW * 
^ te (under 




ViROlW web.iunl rnust 
be iraide "IVEB-JNF" 



Tag Bio MagJ 
(w.tt be isitaewhev* under 

Heudfcr.iog 



foahtml 



the 



diret-tcry 'i. moved o»t of "lib" and 
plated directly urJer *W£8-|NF). 



fwAdwjorTagHander.doss 
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The directory structure "f .> weh app intense, 
AikI everything t>;i* to t>e in exactly the rigln place. 
Moving a web app can hart, 

Bui there's a sohition, railed a WAR Jilt-, which 
*Lond* fbr W'.'l* AJjL'.'h And ii that sound* 
^uspkittusly MltL- a JAR lilc (fnvn AHi/hivc], that's 
because ii WAR is a J AH, A.jAU with a ^swir 
fSifii-*i"ii iris|i';n| nf : jnt. 



you arc herd t 
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deploying a web app in a WAR 



WAR files 



A WAR lite is simply a snapshot *>' yout web app MTuewt^, in a nice 
portable* compressed form {it* really fust a JAR lilej. You jar up youj 
entire web app structure [minus ihe wi:h app context directory ihe 
one, that's about WEB-INF), and pvt- it a .war extension, Bui that doe* 
leave one problem — ii' you don't include ihe spccilic web app directory 
i fleer App. for example), how docs the Container know the name/ 
COOtCx? o£ I h is web app? 

Thai 1 1. | ii tllh ViJUl (.'oIlEaiLUT /il IfOJflCfl/, f/l^ WAffll? OjT file IMJi 

jfi/f> Ai'comci fA^ itn?& ripp jirtme.' Imagine yon deploy HeerApp 
a* it normal directory structure under rrimearAvebapps/Ret-rApp. 
Tii deploy ii as a WAR file, yon jar up everything in the Bt-erApp 
-I iii ' 1<.irV (blit not the BccrApp directory ilself), then name ihe 
resulting JAR lile BerrApp,VL>ar. Then you drop ihe BcerApp.wnr lilc 
into the tomcat/webapps directory. That's it- Tomcat unpacks the 
WAR lilt:, and creates the web app context directory tisinij the name of 
the WAR Mr. Bin ayahi, nw C-inUaiiHT may handle WAR deployment 
and naming difTW-mily, Winn matters to us hew is what'* remim-d hs 
the spec, and ihe answer is. — it make* almusl no difference whether 
the app is deployed in or mil of a WAR! In other words, you si ill need 
WEB-INF, web.xml. etc. Everything on the previous pages applies. 

Ahttnnt weryihhtg. llc-n ■-■■in 'Inn.; yi-n an di whni \ im use .1 
WAR life that you can't do when you deploy without one dectmv 
libra ry tiepriicit'turirs. 

fn a WAR lile. you ear) declare library dependencies in ihe META- 
fNF/ MANIFEST. N If lile. whirh snvrs you a rf»/i/»r-fimr check lor 
whether the Container can find the packages and classes your app 
depends on. That mean-, you don't have to wail until a resource is 
1 1' 1 1 ii'"-!' I 1 1' l"i' iii.- 1* Ei< >l> ihiii.e blows up bc< .ni-sc ihe (loin.iinCJ 
doesn't haw a particular daw in its planpath that the requested 
resource need*, 



Don't bo foole* by que*«^ s K abo n U * 
WAR files -- the rules don't change. 
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web app deployment 



What a deployed WAR file looks like 

When von deploy a wrh into Tojacai by fwattns c&e WAR fOe fiiio ttw ^happi 
diren iniy 'Hum at mi|Kn b ii, i i r.\i<-> the mniexi directory M)'7p«r/ipp m [his 
example)) and the only new thing you'll see is the M ETA- INF directory (with the 
MANIFESTMF file! inside. You will fjir* .1 jl=* I >Ey anrr putt imythhig into the META-INF 
directory yourself, so you'll probably never care whether your app is deployed as a 
WAR. ualeis you do need to specify library dependencies in the MANIFEST.MF lile. 



s 




f on. My Tog Handfer.c loss 



bgr MyHondler.cl(LS9 



eo+alogTogs.tlrf 
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cfirectfy accessible locations 



Making static content and JSPs directly accessible 

Wtit-ti vol j dfptu) &gtXtt FITM1* and JSPs, ytnj can ehcrnse whcttsei to malre then) 
directly accessible; From outside (lit- web appi Ry liirtct/y ncetsuMe, wc mean iluu a 
client ran enter ilie paih to die teseuree into liis browser; and die sener witJ mum 
the resource. Bui you ran prevent direct acres* by pulling Bk* tinder WKB-1NF or. il' 
vi.u'n- il.'|>],n mg as a WAR lilt-, under META-INF, ^ aitesi<U« 



http: //www . wickedly smart. com/MyTestApp/regi s ter/ si gnUp . jsp 



Invalid request (produces "404 Not Found" error) 

http: //www.wicke dly smart. com/MyTostApp /WEB -INF /process .jsp 



Content that's directly 




WCt; i.rril 



process ,jij> ^ 



If the server gets a client request for Anything under 
WEft-lNF or META-INF, th» Container MUST respond 
with a 404 NOT FOUND error! 
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If you can't serve content from WEB INF or 
NF r what's the point of putting pages there??! J 

A: 

Think about that. You have Java daises and class 
m embers with package-level (default) access, right? These 
are classes and member; not available to the 'public' but 
meant for internal use by other classes and members that 
are publicly exposed. It's the same way for these non- 
accessible static content and JSPs. By putting them under 
WEB-INF (or with a WAR file, META-INF}, you're protecting 
them from any direct access, while still allowing other 
parts of the web app to use them. 

You might, for example, want to forward to or include a 
lik- while making sure ihal u. clkm i_an diroaly i cqucst i\ 
Chan J are, if you want to protect a resource from direct 
access, you'll use WEB-INF and not META-INF, but for the 
exam, you have to know that the rules apply to both. 



What d bo u t j META- INF directory inside a JAR file 
inside WEB-INF /lib? Does that have the same protection 
as META-INF inside the WAR tile? 

f\* Wed... ye?. But the fact that the content is in 
META-INF is not the point. In this case, you're talking about 
a JAR file in side the lib directory inside WEB-INF. And 
tinyShmi} in. Wf B-INF is protected from direct access! So, it 
doesn't matter where under WEB-INF the content is, it's still 
protected. When we iay lh^l MTTA INF ii protected, we're 
really talking about META-INF inside a WAR file, because 
the META-iNF inside WEB-lNF/lib JAR files is always 
protected anyway by virtue of being undai W if.- INI 



0 : 

On an earlier page you mentioned puttinq 
library dependencies in the META-INF;MANIFEST.MF 
file. Are you required to do that? Isn't everything in the 
WEB INF/lib jar files and the WEB-INF Classes directory 
automatically on the slasspath f <*r this application? 

A: 

£\_ Yes, classes you deploy in/with the web app, by 
using t he WEB-INF/ c lasses directory or □ JAR in WEB- 
INF. 'lib, are available and you don't have to do of say 



web app ■ lepioymertl 



anything. They just work. But... you might have a Container 
with optional packages on its dasspath, and maybe 

you're depending 0|*| some Of llujn- pat k.iCjei. Oi maybu 
you're depending on a particular versren of a library! The 
MANlFEST.MF file gives you a place to tell the Container 
about the optional libraries you must have access to. If the 
Container can't provide them, it won't let you successfully 
deploy the application. Which is a lot better than if you. 
deploy and then find out later, at request time, when you 
get some horrible (or worse — subtle) runtime error. 



0 : 

How does the Container access the content inside 
JARfiles in WEB- INF/lib? 

A. 
* The Container automatically puts the JAR file into 
its dasspath, so clones for servlets, listeners, beans, etc 
are available exactly as they are if you put the classes (in 
their correct package directory structure, of course) within 
the WER-INF/classes directory. In other words, it doesn't 
matter whether the classes are in or out of a JAR as long as 
they're in the right locations. 

Keep in mind, though, that the Container will always look 
for classes in the WEB-INF/classes directory be/or*? it looks 
inside JAR files in WEB- INF/lib, 



0- 

>£, OK, that explains crass hies, but what about other 
kinds of files? What if I need to access a text file that's 
deployed in a JAfi in WE& INFflib* 

Th i 5 i s d iffe rent. If your we b ap p code needs d i rect 
access to a resou rce (text tile. JPEG, etc.) that's inside a 
JAR, you need to use the getResourceQ or getResourceAs 
StreamO methods of the classloader— this is just plain old 
J2SE, not specific to serviets. 

Now. you might recognize those two methods 
(get Resourced and getReiourceAs5tieanrii)|, because they 
exut also in the 5ervletContexi API. The difference is, the 
methods inside ServletContext work only for resources 
within the web app that are nor deployed within a JAR 
file. (For t he exam, you need to know that you crrn use the 
standard J2SE mechanism forgetting resources from JAR 
files, but you do not need to know any details.) 
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servlet mapping 



How servlet mapping REALLY works 

YouVc -.t in example of wrvtei msppfttg in iW Dcptoymew D**cnpwtm 
wc*w nsfd iji earlier chapters begfanirtg wtih ilir mrnrial. 

Every wrvlei mapping taw two i>i"'>> the <strv|ot> element and the 
<jcrylct*m«pping> element The <servlet> defines ;i servlei luimt- iind eJasH, 
and the <!*rn lt L Hn;ippiiitf> dduies the URL pattern thaj map* to a scnltt 
iiiimc- defined som civile rr rise in the I ID. 

<web-app •xmln5- w ht.tpt//javA.sun.c<iiB/xnil/ns/ i 

xmln5 : xsi =*ht tp ; / / ww . w3 . o rg / 2 fl C' 1 /5<MLSc hema - ins t an " 

xsl :scht!mflLa<;iitlDti='"Kttp: // java,SLin.[:otii/'Kmi/tiii/12ee/w'jb-LipLi 4 .xad" 

versioii="2 . 4"> 

Vj far ^ fa other 

cservlet-nanv Beer /servletTianie> 

<servlet-ciass - ->ecfT(i. exajnple. Bee i Select< /seivlet-claas> 



< sorvls t -mappitig> ^ . ^ ^ fyitt 

<servlet-nanie;-B«r<7servlet-nanie> ^ e!fl a U ^" f ^.. ^ CuA th« 

US, Conner 

<url-pattern>/Beer/SelectBeer.da</url-pattern> - ™ ' ,_-> a «<* ,, " rt? \ ~ f 
</ se rvls t -mapping> ^ fc^* 1 ^ 

b-apps 




6^6 chapter 11 



•web app deployment 



But I don't see a 
directory named "Beer" 
ond there's no file named 
"SelKtBeer.do" 



0+ 8* pJ^t,,W ^ Jpft 



* *c DP! 




h ttp ; / /www . w i ekedly smar t , c om/ Adv i ceApp/Bee t / Se LectBeer . do 



The ACTUAL {physical) 
directory structure 



The VIRTUAL (logical) 
directory structure 



let 




] **$y exalt 




St lectecir.de 



^^ tS ctt 

io <rt!\>t& Bcei ■ Se ket cl as s 



nuMi nil 

111 PLJM 



IIXI. I 



SeerSdect.dc 
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virtual vs. logical 



Servlet mappings can be "fake" 

Tfte L'ft|. pattern vou. put into a servtet mapping can b*: 
< i tcri|Hlt"i«-Ey tti+uJc-up. Iraagrnary l&k&jusl a logkaJ name ytm 
want to gh* c licms- Client* who fiavt? ihi business blowing 
anything about tfafl wa/ physical *trttcturc of your m-l> ami. 

Willi srrvlct mappings, vlhi have two ttrudtwra to organizes 

I lie \ :\ \ -I. |! 1 1 II ii h -\\ l:l 1 1 I i!'- --II 'i Ill V I IM !l '. "ID \\v\> 

app resources. live, and the vtrtitfif/fogiral structure. 



The THREE types of <url-pattern> elements 



I EXACT match 

cui t-o3,ttEjrn>/Beer/SelGctBoer 1 do--/u: L*-j»ttein> 



DIRECTORY match 

u r 1 -pa t tern > /Beer / * ^ u r 1 - pa t t.e r n > 

p EXTENSION match 

•nir l-pattern>* .do</url-pattern> 

asterisk tm (^VEf? e *U^o* < 3* "** ' 



The virtual/logical structure 
exists simply because you 
SAY tt exists? 

The mi patterns in the 
DD don't map to anything 
except other <3ervjet-naine> 
elements in the DD. 

The <servlet-name> elements 
are dietey toservlet 
mapping-they match a revest 
<url-pattcrn> to an actual 
servlet class. 

Key point : clients request 
servlefcs by <uiTpattern>, 

NOT by <Servlet~name> fir 
<servlet-class>! 
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BE the Confainei 1 Ke Y rules about servlet mappings 



IsMrSepvlet will fta 
Coitfainef thoage given 
(A the DD servlef mapping's 

JV^lieSiS shown? 
You'll lave 
imtiom like 
AlS oti the real examf 



1 ) The Container looks for matches in the order shown on the opposite 
page. In other words, it looks first for an exact match. If it can't find an 
exaef match, it looks for a directory match. If il can't find a directory match, 
it looks for an extension match 

2) If A request mulches more than One directory <uri-pat(em>. the 
Container chooses the longest mapping. In other words, a request for ilml 
bar/myShrff.(Jo will map to Ihe <url-pattem i * ffoo/barr ereri though it atso 
mashes the ^nrl-pattern? floor The mosl specific match always wins 



<servlet> 

<r servl et -n Eune>One < / s er vie t - name > 

<5ervlet-clas5>fcK>, DeployTest.One</ , 5ervlet-clas5> 
«:/seivlet> 

< servlet-mapping> 

< se r>/ 1 e t -n aine^ One < / 5 e rv 1 1; t-na rue > 

■M.<rl-pa1rtern>* ,dO</url-pattern> 
</servJel:-iiiapping> 



- servlet> 

<servlet-n ame>T vo< / s a r v le t -name > 

< sa i: vl Dt-c 1 as e > f go . Dep 1 ay restTu o< / se r vl et-c 1 a s a = 

-'-servlet-mapfiing> 

<saL u , lt'L-uiU[it->T*o- t -/L.trr v Let-name* 

< ur 1 - pat te u i 7 fooS tuff / b ax <:7 u i: 1 -p at t er n> 

-■ / eeivlet-mapping:- 



<servlet> 

•:servlet-najne'>Three< / servlet-name^ 

<servlet-clas3>f oo. DeployTestThree< /servlet-clas5> 
< /£jervlet> 



< se rv la t -ma pp i f ig> 

<servlet-naine>Threi? 1 "- / 5ervlet-na:me> 

<url-pattern>y 
< / s e rvle t -mappi n g> 



Requests: 



Container choice: 



hitp-ilotalhostaQeO^MapTestj'fDoSlulf.'bar 
Container choice: 



htlpJ^ocalhostiaOSa'MapTesl/fooStulf/bar/brife.do 
Container choice: 



Container choice: 



http://localhost:80ao,'MapTes^red.1)lije.do 
Clonteintit rhniw 



mip./.'localhost:80aOJMapTest; l fDoSlutf 
Container choice: 



hOp^ocaihost^O/WapTesltooStufr/bar.'fciofo 
Container choice: 



hHp^localhost:8aaa/MapTesUfredAtlue.fo 
Container choice: 
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exercise on servlei mapping 




Mappings: 

<"eerv.let> 

-cservlet - name>One< /se r v I n t-n ams > 

<5ervlet-ciass>f oo.DeployTest0ne</servlet-cla55> 
■c/servlat> 

< % e r vl *t-tnapp i 1113 > 

< s er vie t - name >0n e< / ser vi e t-n ame > 

<u> l-patteiri;-* . dO< /url-patte in> 
</se rv 1 et-ms pp i r.rj > 



•sservlet? 

< s ervla t -name ^Tvo* / se r v I e t - name > 

< s ervlet-elassuf 00. DeployTest Two </serv let-class > 
</servlet> 

<:servlet-TTiappi.ng> 

< s-e r v J r t - nam*? >Tvo < / pe rv 1 e t - n ame> 
<url-pattern>/fooS tuff /bar- /url-patt.ern- 

'- /isoi i/loL-nuippIiby > 



<servlet^ 

< Be rv le t- name >Th r ee< / s e j- v 1 e t -name > 
<servlet-cIa55>too.DepIoyTe5trhree</5ervlet- 

</servlet> 

■eservleL-niapplrtgs 

< ser v le t -name >Thr ee< /s&rvlet -name > 
t. u 1 1 -pa 1 1 b r tr? 

<7 servlet-mapp ing> 



Answers Ed the exercise on the opposite page. 



class."' 



Requests: 

hltp://loca«host.80eO^MapTestib«ue.do 
Container choice: DeptoyTesECfie 
(matched Ihe '.do extension pattern) 

hltp^ocaltiosCSOSO^MapTestffooStiifTftar 
Container choice: Deploy Test-Two 
{exact maicti wtti /focStulflbar pattern) 

htlp:.'.'looa- host: 8080,'Maptsstf ooStuftiliarVblue .do 
Comai/ier choice: DflptoyTestTJmee 
(matched itie tfooSluff'" directory pattern) 



Co/jfa/ner cflorce; DeptoyTestThree 
(matched /fooSltifljf* directory pattern) 

hBp^toca^hostaoso.'MapTest/fred/blye.dQ 
Container choice: DepfoyTestOne 
(matched the *.do extension pattern) 

httpJ/localhosLSOBDMapTest/fooStutf 
Container choice: DepfcyTesETlnee 



hltp J/locaihost, SLOTMapTesttfooStuflte/foa to 
Container cno/ce; Dep'oyTestTtiree 
{matched the H00SW dsmctory pattern) 

http:;/bc3lhostB0B0J l MapTest i, fred 1 , blije.1b 
Container cftojce: 404 NOT FOUND 

(doesnl match WIYTHWG) 
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Subtle issues 



Juki Lh make sure yun urwJf I'&lJind (SMVlel mappkkgR, hcfeVone ttttift 
linK- example. Don T l m l<mk closely ai both the mapping and 
iln j requests. (In iliis mini "Be the Containt-r". \Ur ;nr :n 1 1 u ■ 

hm lorn of iJn- Opposite pillar. » don'l peek.* 





Which servlef will (lie 
Container dioo&e? 



Mappings in the DD 



<serviet> 



< 5 ervle t -mB||S>Two^ / se r vl et-n ame > 
<servlet-eiass>f do. OeployTestTwoc/servlet-class - * 
</aervlet> 



< u r I -pa ^ t e e n > /f ooS tuf f /bar <r / u r 1 -pa 1 1 e r n> 

</5ervlet-jnapping> 

<servlet> 

< s« i v 1 e - name >Fou r < /se rv 1 e c - name> 
<servlet-clas5>£oo . DeployTsst Four</servlet -class> 

< serv let -mappings 

aetvle t-n awe >Ftm c</se rvl e t- ti ajne > 
* 1 1 r 1 -pa t te ™ - /f ooS tuff /bar / * < /u r 1 -pn t t a r n 
</ servlet-itupping> 



<; servle t - name :--T wo 



t-name; 



Requests: 



0 http://localhost:eoao/test> , foostuff/bar/ 
Con&imr choice: 



® h Hp : //I oca I host: 80 8 D/test/fb oStu ff/ba r 



Container choice: 
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welcome fries 



Configuring welcome files in the 99 



You already know that if yh.ul lype in the name of a Web HW and 
yi m don't specify a specific fi|e T you (usually) still gei somcihing 
buck, Entering kttp:/ /uKv;F,f>mlh,t«jn into your browser lakes yon 
in die O'Reilly web she. and even though you didn't name a 
specific renounce (like "home, html' 1 , lor example i, you ^ t ill get a 
■!> !■■!,> 'I | ;. !!!• ■ 

Ynu can configure your server to define a defaiill page for the 
entire site, but we're concerned here with default (also known as 
"welcome*") page* (<n individual j-effl «jp^.t. You i onfigur 
wcL ome pages in the D1X and thai 111) (fcterminee what die 
t lontatner chooiiei when the client enters a patiat CRL^a 
I'kL ilmt includes a directory, Ibr example, hut nut « specific 

resource in the directory. 

In other words, what happens if the client request comes in for: 
http://ttnemwickedfy-stnart.com/Jbo/bar £ — '"bam - " ii \vsi i directory 
and ^b.u" Ls limply u directory, and yon don't trace a specific 

•ervlet mapped to (hi* L'KL patten*, When w& the i Ifeni «*? 
In the DD: 

< web-app . . . > 

<weJ.come-f ile-Hat> 

<we I come - f i 1 e > index . h£nl<f we 1 come - f i le > 
* we 1 cftffle -file ^default , j sp< I weleome'^f tie 
</welr;:om<s-f lie-list^ 
</web-app> 



Imagine you have a wb app where several different directories 
have iheir own default HTML page, named "uidexhtml* 1 . Urn 
some directories uk a "default .jsp" instead, It would be a huge 
pain if you had to specify a specitii default page or JSP Ibr earh 
directory thai needs une. Instead, you specify a l»tj in oidcQ 
of the pages you want the Container lo look Ibr in whatever 
directory i E n - partial request is for In other words, no matter 
which directory is requested, the Container always looks through 
die same Est— the one and only <Melconie-file-list>. 

The Container will pick ihbjirsi match ir Hinfs, starting With the 
first welcome fdr listed in lite <welrome-lilc-lis.T>. 



Multiple 
welcome files 
go in a single 
DD element. 

No matter how many welcome files 

you might list, you put (hem ALL mto a 

single ertry in tin DD: 

* wP )come-ftte-tist>. ft's tempting 
to think thai each file might go <n a 
separate wetcomG-fite-HsP element, 
but Ihafs rat how /(worts.' Eschfite 
has 98 own <wefconw-fite* etemenj. 
rw( you pul ALL of them within a 
single <weicome-fi!9-tkt>. 




Tho flies in the 
r • \ ^vueicome-flit>> 
element do MOT 
start with a slash! 

Don t be confused. The way in which 
the Container matches and chooses 
welcome fifes ls nol ihf! san)t} as ^ 

way in which it matches URL patterns. 
If you pul the slash m front of the fie 
mm, you'll be violating the spec and 
bad things will happen. 
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BE the Container 




Which welcome fifes wi II 
the Container choose 
die DD and the client" 
repots shown? 
You can expect 
Something like this 
on the exanr. 



The DD: 

fwelcamG-fUe-Ust;. 

iviel come - f i 1 e > i ndex . h tml < /wel come- £ i le > 
<welcom«-f i ii3>di3f ault . jsp</wilc:onn3-f ile> 

< / we 1 come-f ile-list> 



i — 1 3 * 




[regiistraTlarti 






ST 




indax.htmt 



.ndex.html 



Container choice: 



http fflocdtoti 8080/MyTestApp/registraBofV 
Container choice: 

http iviocaihosi 8080/MyTesWpp^search 

Container choice: 



http /jlocaihosi SOSQMyTe&iAp^regi&traiiontaewMeniteH 
Container choice: 
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exercise on welcome files 

BE the Container 

Answers 



The DD: 

<welcome-f ile-list> 

« we 1 come- f i 1 e> i nde x . h t m 1 < / we 1 come- f i le > 
< we 1 come- f i lode f -suit . jsp</welcome-f ile> 

</welcome-f ile-liot> 



Directory structure: 




f 00 T ft 



Requests: 

Http:/^liiosfaoao/MyTestApp/ 

Container choice: 

MyTestApp'jndex.hlml 



tiHpyflocaltiostieOSO/MyTestApp.'nag isiratiorv 

Container choice: 

MyTestApp/ragEstratorv'indeK.htmi 



tittp:/jlocalhosteoflorMvTestApp^F[ii 

Container choice: 

MyTestApp/searchfdefaulLjsp 
(If ttiere HAD been both a default. jsp and an index.html in 
Hie "search" directory 1 the Container would have chosen 
flifl "inrl^x hlmT file, SJnos il is listed first in (fie DD ) 



hlttp:/toslhost.flOfl&^TwtApp/r^islration^nBwMeiTiber/ 
Container choice: 

WTen no flies from the <welcorrte-fiile^ist> are found, the 
behaviof is vendor-specific Tomcat stvows a directory list- 
ing tor ihe newMember directory (which shows "foo.tx!"). 
Another ConLamer might show a 404 No! Found error 
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How the Container chooses a welcome file 



Client requests: hnp //ww.wAeclly&maii oanVMyTestApp/search 
/MyTestApp/seorch 



Of 

□tent 




Container 



[MB 



□bEflt 



Container looks in the DD for □ servlet mapping, and 
doesn't find a match. Next, the Container looks in the 
< welcome-file- 1 ist> and sees "index.html" at the top. 




<welcante-f ile-Iiat> 

<welcome-f ile>index . html c/velcsome-f ilea 
<we 1 cpme - f i 1 fault, j sp< /we L^opie-f i 1 e ;■ 
< / we I come - f 1 le - 1 i s t > 




■Container looks in the /MyTestApp/search directory 
far an "index.htmJ" file, but does net find one. 



■Container 



■■Xslhereci" 



default .jsp 



r i ii 




CI Ml 



Container looks at the next <wekome-f>le> in the 
<welc erne-file- 1 ist> in the DD, and sees "default, jsp 4 '. 




<wel<Jome- file- Lis t> 

<welcome-f ile>inr5ex * html <■ /welcome- f i le> 
— ^ <weLcome-file>Cte£ault. ]sp< / welcome- file 
- 7 welcame-f lie-list:- 



© 



Container looks irt The /MyTestApp/seoreh directory for 
a "defauit.jsp" file, finds one, and serves its response 



the client. 




' fgr n — i 

H 
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error 



Conf iguring error pages in the 

Sure, you want to hi- frii-ndly whfm the ntcr doesn't know the 
tMn-t refoujhee in mk n>r wfcea th<sy £< j i to yeutr site nr wep app, 

sn you spec ify de tall 1 1 /whom e files. Bill vim (tbo Waul in fee 
friendly when tktSgf gO aratig. We already looked at t liis. in the 
chapter on Using Custom Tags, *n this k jusi a review. 



Declaring a catch-all error page 

This upplio lu everything in your wet) app- not jusijSPs. 

<c except ion -t ype:> j a va . lang . Throwabl e< /e xc ept i on-t ype > 
<lQcation>/errorPage . j sp</location> 
^/ciroi-page* 

(KYI: you can override thi* in individual JSPf- by adding a 
p;tir«- diieotivt- with an rnnrPngr attribute.) 



Declaring an error page for a more explicit exceptio n 

Tins configUF^s an error page that*» caHed only wfren 1 1 ■ < re?i 
an Aruhiiit'lii Exn.'jniHiti- IT you have both diis ilri.laialir.ni 
and (lie catch-all above, then any exception other than 
Ai Ulimcticlixccptinn will still end up .it die '"■crrorPagc.jsp". 

^'error-pagO 

Oxcept ion- type>java. lang. Arit timet icExcept ion< /except ior;-type> 
<lo m t i on> /ar i thsiwa t i cE r r or . j a p< / 1 oca t i on > 
</erior-page> 



Declaring an error page based on an HTTP sta tus cod e 

This COnfigurr^ an error page lli;ii\ railed onb \\Um ihr -1.1k 
ccxle (or the rcspooic is "-J 1 *-!" lile not found), 

<error-page> 

< e r ror-riode -■ 4 Q A < /error- crxie> 
<location> AiotFaundErru E . j efcW/loca tian> 

</error-page> 



You can't use 
<:error-code> and 

<e>cceptl*>ri-t¥P e> 



You can configure afl error page 
tosed on the HTTP status code OR 
based on (he except VP e (hrt)lVin - 
btr f you CANNOT have both in the 
ftiri <error-pag9> tag. 
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W hat a re you al towed to d e el a re a s an except i o n ty pe i n 



A: 

f\ A nyt hi ng t hat's 3 Throwa ble, so that i ndudes java. la ng .Error, 
runtime exceptions, and an/ checked exception (as long a* the checked 
exception class is on the Container's cfasspath, of course). 



Speaking of error handling, can you prog ramm at realty 
generate errnr codes yoUrselfF 

A: 

£\ Yes, you can, Vou can invoke the sendErrorO method on the 
HttpServfetJtesponse, and it'll tell the Container to generate that error 
jusi as if the Container generated the error cm its own. And if you've 
configured an error page to be sent to the client based on that error 
code, that's what the client will get. And by the way, 'error" codes are 
also known as 'status" codes, so if you see either one, they mean the 
same thing— HTTP codes for errors. 




You must use the 
fully-qualified 
class name in 
<exception-type>! 

Don't be fooled by sortiething like this: 

-<e*c:epti on- type> 
lOEstception 

<7ejiception-type> 
You MUST use tbe My-^rfed class 
name, and any ThrowiWe is 



How about An eXa mple af g ene ra t i ng you rownerrorcode? 

A: 

XV OK. here 'i an example: 

response . seraffirror f H ttpSerTrl etReapon se . SC FORBIDDEN) : 
which is the same as: 
Msponse . sendError 1403) j 

If you bok In the HttpSetvlet Response interface, you'll see a bunch of 
constants defined for the cjommon HTTP error/status codes. Keep in 
mind lhat for the exam, you don't need ta memoriie the statu* codes! 
It's enough to simply know that you ccm generate error codes, that 
the method is resp on se.se ind Error! ), and that in terms of the error 
pages you've defined in the DD, or any other error-handling you do 
in your JSPs, there's no difference between Container-generated and 
prog rammer- generated HTTP errors. A 403 is a 403 regardless of WHO 
sends the error. Oh yeah, there's also an overloaded two-argument 
version of sendErrorO that takes an int and a String message, 
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foad-on-stertup configuration 



Configuring servkt initialization in the VV 



Von already know that i&rvfet* hy de&nft, we inMatfoed « tiwt 
request That means the first clkm fmffen tin? pa it) o|~ Hnss loading, 
instantiation, and initialization (selling a Servle I Control, invoking 
listeners, etc), before ihr Container can do what ii normally docs— 
allocate a thread and invoke the Hcrvlct's service! ) method. 

If you wan l servlrts to be loaded al deploy lime (or al server restart 
time) rather ihan on first request* usr die <;l[iad-on-starlup> elcmenl 
in i he DD. Any noaTOegatrtfe value for <load-on-siartup> tells the 
Cniitiurter to iiiiii;dizr the hervlet when die app is tteployed (or any time 
the server reMa mm. 

If y i HI h;i\c NillLli|j|<' seivli'ls lh;it y>il Uiiill jin-li i;idi'i I. \otl U;uil In 
cnniHil iht- order in which they're initialized, ihc value gf <load*en- 
stariit|j> determines 1 1 1 «-■ order! In inher words, any rum-nefrauve \;ilm' 
means load cnrly. hu1 the order in which scrvlcls arc lo;ided is based on 

V.d It*" '•" 'l.i di]|. I -. - 1 1 1 : ! . i i . ; -. ,| L- -r , , t 1 1 1 , ,|' I iiin I -, 



Being the first client 
to request a sender 
SUCKS Lipids iht developer 
uses d(Hid-<?n-startup>. 



In the DD 

<servlet * 

<ee r v 1 e t- n ame >K<i t by one < / s e r v le t-netne> 
<servIet-class>foo .£ieploy'festOriD</servlGt-cltisi5> 
<1 oad - on- s tar tup> 1< /load- on- s t ar tup> 

l than weiBS 

&r tiie f revert. 



Wouldn't y°u ALWAYS want to da this? Shouldn't everyone | List 
uie clood on-5tart jp.i'1 </tond>dn-stftrtup;> by default? 

A: 

£\ To answer that question, you ask yourself, 'How many S9f vlets do I 
have in my app, and how like-ly is it that they'll all be used?" And you'll also 
need to a? k, "How long does it take each servlet to load?" Some servlets are 
rarely used, so you might want to conserve resources by not loading the 
rarely-used servtets in advance. But some servlets take so painfully long 
to initialize (like the Struts AcfrorrServfet), that you don't want even a single 
client to experience that much latency. So. only you can decide, and you'll 
probably decide on aservlet-by-serviet basis, evaluating both the pain level 
and likelihood of Use For eat h servlet. 



rjm^S Value* 9"**™" than 
^mf^p one do not affoet 
the number of 
,^r«ln* instances! 

The value you use: 

does NOT rrtean "toad four instances 
of the servief. ft means (fiat this 
servtet should he loaded only AFTER 
servers twin b <ioadon-startup^ 
numberless than four are loaded. 
And whal it thefe * more than doc 
servtet wrffi a <nadwstMup>rf<" 
I The Container toads servtets with the 
same value m the order in which the 
servtets are declared irl the DD 
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Making an XML-compliant JSP: a JSP Pocument 

This topu didn't Hi weH anywhere i-i>r. eta we decided to stkk it it* th» chapter tmsx we*** 
talking aboul XM L so much. The. exam doesa"! require you ns b$ ;iri XML expert, but ymi :l" 
have know two things: the syntax l>>i ilu* ki*y Dll Hemt'iiK and the bay it^ <>f making Wrriai\ 
known as ajSPGodtnunt rAs apposed to cnAsj^ If a stomal JSP isn't a document, whai is it?' 4 
That's what you H rr a*kinsj, right? Hunk of it ihLs Way —a normal JSP is a unices it'* written 
witb the XML alternatives to normal JSl 1 syntax* in which cast" it becomes a foatmeaL) 

All it means is that ihrrc arc really tar types of syntax you tan use to make a JSP. Tht* text in 
grey Is ihe same across both types of syntax. 





Normal JSP page syntax 


JSP document syntax 


Directives 

(except taplib) 


page Lroport= w j avi . nti I . *" 


< jap: directive. page iinpC'i:t=" java .util . *"/> 


Declaration 


<%! int y • 3; fc> 


< j sp ; decla rat ion > 

Inr. y = 3.* 
■- / j sp : declaration > 


Scrlptlct 


Mr| ..^.+-|("Fred") f 


< j sp : sc r ipt I et > 

list. add ("Fred") ; 
</jsp:sciriptJet> 


Teat 


There in tiL- spoon. 


< jLip;teXt> 

There is nc spoon. 
< / jsp:text> 


Scripting 

Frprflssinn 


<h= it. next (J %> 

— JL 1 


< jsp: express ion ■ 

ii.next!! 
</jsp: expression 



— 



- 

f V) ffiis is a;/ the exam covers on JSP Documents. 

syrttex i^o an XML There IS mow yw J'™™" £ fw|]fcft Jflc/t/des somet 
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configuring c & references 



Memorizing the EJP-related 9V tags 

This exarrt is about w*h wnTtpotwntsj not btmncM component* (although in the 
Patterna chapter, you'll a few things about business component*). Bui if you're 
deploj hiii- ;i J'iEE app s cfltnplew with EnterpriseJavaBeaiis iEJBiO in ilw business 
tier some of your W*b conipnnrnis will pinbubly need In lookup and WGCCtt die 
enterprise beans. If you're deploying nn app in n lull J'JEE-coiiiplianl Container 
(one thai has an KJB Container as weilj, you can define references to EJBs id the 
HE). Viiii i|fi.ii'[ have to blow anything iilmul KJIi* t'oi ihi* exam, other llibiti what jroti 
declare in the HI), bo we won'i waste yuur rime explaining it her*** 



Reference to a local bean 

<e jb- local -re£> 

<ejb-Eef -name^e jb/Customer^/e jb-ref -name> 
tejb-ref-type'-->EntltY</ejb-ref-type> 

<local-home>CGnL.wic)cedlysiii£irt , tu:jtotiii£LJLvi>.'</loc;al-he(tflje> 
<local>c _ .Ti . wi^rkecilysniart . Customer</local> 
</ejb=local-ref> _ \ 
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A LOCAL been means the client (in 
this case,, q Serylet) and the bean 
must be running in the same, JVM 



Reference to a remote bean 

<ejb-r*£> 

::oit-rof-name>e3b/LocalCuatomer</ejb-rof-nj||>( 
te j D-re t- 1 ype>hint 1 1 y< /e] d-ret - t ype> 
<howe>com. Wicked 1 yama rt ♦ Cua L<'jmErHoni*</hanie> 




<remota> j : :n . wicjcedl '/smart . Customex</remote> 
</e jb-raf > 

A REMOTE bean means the client (in 
(&pl\<*i\ S4.b-ele-He*-b fw bcih id*,. .„d„<J e ihis iax - ° servlet) and the beon can 

^iri^U^ and <t^-\\fk>, bbt tW-t he rumi ng in di f f erent JVMs (possi bly 

*«d b lc„cw U,*t L {h e ncjn, / 0n dlffercr+ P h Y Slcd chines OS well) 



* But if you're iutercm-ri in FJB. tbwfc'i tliii t&tty goad book.. 
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The LOCAL and REMOTE 
tags are inconsistent! 

Both Jhe tacaf and remote tx&n DD j 
SSb-reS> IftaWWB DM bgicat (ooUup name 

£T<^> ref-iw*> descrta* Aether INS is an Brfily j orSes 
^jo-ref, «» „*« b. templed^* 

tfiaf it's. 

<e;Mocaf *#■ <- ^ 
But NO! for remote bearts. It's just: 

faa element name, WW? Because at inc ',, ' « ee 
S drfntf. ^ no J^ 1 ^^ 
i G n(efPDse beans were remote . tnere w<** i« 

a£reS*»*" taiMn^M - « 
-remote" ft In* name erf H« g* ^srsten^ 
1 This also MP*™* ^ B o7HER ta 9 " „.L-^«, 

grje n*ne of (no fag for ffW s norm 

bean uses. 

0u r a remote bean does NOT" use. 

</^^^eJr(ime> ^ ' ^ r * m 5- 

For remote bearts, 
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Memorizing the JNPI <env-entry> 99 tag 

[f you're fa Miliar with KIH Snct/GF ,|M»I, this will m;ilu *hm-. If v..u> 
mil, ii cliK-Hii'i really matter for ihr cx;iiti as km>j ... . ■ ■ ■• n !/■ tin 
tag [The detail* siufniuiidlnyJHlJJ efl<uirotim*nl entries are covered in 
r0B/J2EE books like the lovely 

Think of an environ men I eiiln «s IkHiir something like a ttt-ploy-tiine 
■ crastanl ih;ii your app l,sc < much like -servlM ;md omlexl mil 
parameters. Jn oilier words, a wuy for the deplnyer to pa.35 values into 
the ncrvlet (or in this, case, an Lj"lJ as well il this is deployed as pari of an 
enterprise application in b fittty JJKri-eniiiplibitu servei 

Ai deploy time j the Container reads the Dl) and ni.iLi -. ajJNDl ■ ■ ii Liry 
again,, assuming i lii^ is ;i liilly jSI'T^oaiiplium app, and potjpsi .1 wrwi 
With only is (Wft Container), using the name .uid value you supply in llii* 
LTD tag, At niriHiii!', a enmpmienl in the applicadoa cart look up (he 
Value biJNpl, using (he name lisird in the Dl> Yon probably won'l cure 
ttbonl <cnv-entry> unless you're iilso developing with EJUs, so ihc only 
reason you need to memorize (his is for the exam. 



Declaring an app's JNDI environment entry 

<env- e nt ty > T* l«*-T — IT 

< e n v - 6; nr. f y -name > c a tea Adi 0 to u h LHa Ls< /e ti v-e fi 1 1: y-namc 



■-'env-entry-type^-java.iang. Integex</env-entry-type ^ ^ '*^be day ^YP* ili*t £jte 
<-env-entrv-value:-10</env-entry-value> P*'^^ , J: ^"'J^*""^**" 




The cenv-entry-type> must 
NOT be a primitive! 



<S ,-eWtype- can be a p*™t^ ^ ^ 

on/y String and wrappers, M * 

ran use arty fyr* that takes a stngJe SWjflT«^ 
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Memorizing the <mime-wappmg> 99 tag 



V(jli rati configure mapping between so estiojtffc»n and a BtTfrtf rypt- tn thc 
DD- This will prrihfihly hf- rise eaaiesi rag to remembem bi^eause ii just rnakus 
sense yon nt:i]i between ;m extatsion <mel a miirtr-ht,, ;nnl miess what? In 
,1 rare mommi c»f simplicity mk\ clarity tliry named tin' u»n sulvvlrmcitis 

n-:-: in ' mid "miiui--i " Mi h i i i - - . ■ i i - vmi in i'i isicinlii i niil\ ■ 'in 
thing— that the tag ehmntis mi named for e.\att!j u/in! thtv art! 

Unless yem s-Lari thinking nf if ;if- "file-type" and "content-type". Bin nn, ynu 
won't du that. Vuu'tl memorize it jwti like this. 



Declaring a <mime-mapptng> 

<mime-mapp±ng> p„ \i($T irt\v6t ^ 
<*x tarns ion> mpg </ex tension? 
<mirae- typ«>v idso /rapeg-c/mime - type> 

< /mime - mapp i ng> 



Don't ineluds 
IP^P the in the 

extension! 

H'sjubI toe characters rflaf mate 
up (he extenson, not «ie " " that 
separates the fife name from ths 
exierrsibn- 



It's not <file-tyjje> and 
<content-type>r 



Bum it in-^extension* and <mime-(ypG> 
*extenston> and <mime*type> 
<extension> and <mime-type> 
<extonston> and *mtme-typ8> 
<extension> and <mime-type> 
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^Jharpen your pencil 


Where things go 

Fill in this table witti explicit notes on where m the web app 
the given resource must be placed. We did tfie first one far 
you. Turn the page for the answers 


Resource type 


Deployment location 


Deployment Descriptor 

(web.xml) 


Pretty .ri.de ItfEfM^F (wbiiK a d.rctily .m.de tKe voet of 
i^e: web iff? 


Tag Files 

(.tag or .tagx) 




HTML and JSPs 

(That you want to be 
directly accessible ) 




HTML and JSPs 

(That you want to "hide" 
from direct client access.) 




TLBs 

tm 




Servlet ctasses 




Tag Handler classes 




JAR files 
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irpera your pencil 



Memorizing DD tags 

If you're NOT planning on taking Hie 
exam, don't wony abouE getting all 
of these right (alttiough the bottom 
two elements are important to 
almost everyone) 

If you ARE going to take the exam, 
you should spend some time 
memorizing these 



<e j b-re f -t ype >En t i ty</-e j b-re f -t ype> 

* >com.wickedlysciart , Cust 03nerHome^_ 



< 1 o ca 1 >conL . w t c fcedl y sma rt.Cgs tome r< / 1 racs 1 > 



>e j h/ LocilCus tome I < 



<ejb-ref-type>Entity</ejb-ref-type-- 

< >catn . W i c Icedl y Eina rt .Gust ajRe rHome< 

< >nom.wic](edlysniart.cu5t-OTier< i 



<env-BDtry> 



. >tatfer/discau!itRate< . 



> j 3 va . lang . in teger<- 



«MBV*ehtry-val'J«>10</env-entxy-value> 

< v-pp r r y > 



< __>java.io. IOException< > 

>/myerr(iE.]sp< j 

</-error-page> 



<■ 

■;welcDTne-fiie>iTictex.htral</welcrDnie-file> 

< > 
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Sharpen your pencil 


Where things go 

Fill in this table with explicit notes on where m the web app 
the resource must be placed. We did the first one for you. 


Resource type 


Deployment location 


Deployment Descriptor 

(web.xml) 


Prettfy .ri.de IVEIMNF (whtdb u d.retily .rJ.de tbe v<#t of 
the web iff 3 


Tag Files 

(.tag or lagx) 


ff NOT deployed .nside a J/lR, Tag Files »«*t be -rj.de rVEB-JWVtagt, t* 
a ivbdirecUy of tfEB-IMF/tagt ff deployed » a JAK, Taj Rfe* *utt 
b< th META-WF/tajv * a idtftaetm** METMrVF/t^ Ta 5 

r nc* IJ '-r , "7 u ' u > ™^*tr nif*c ■ I v- if* Lrtc «>T 


HTML and JSPs 

(That you want to be 
directly accessible.) 


Clieh-t-JfiidHibli HTA1L JrJ J£Pi £jn be J*ywbere ..r-dfr ike root of {h* w«b at'P 

or j«y of itt subdhrefrbxriti, EXCEPT ttey tjnhfli be under tVEB-INF fihtWiwj 
sJbdi«tW*0 ft J WAR file, they tan'i bt *nder META-FMr ^Uirj M.bdiretW*) 


HTML and JSPs 

(That you want to "hide" 
from direct chant access.) 


Paget ™der rVEB-ltfF U META-WF m a WAR file) fia n »t be diMtftly 
attested by filien-b 


TLDs 

in 


If HOT .mhJ« a JAR, TLP file* -»**t be w-»e*.Sere wider rVEB-fi^F or 
» i«bdiretiory ^ IVEB-INF If deployed h a JAR, TLD filet ».«t be 
Habere „rder META-INF, * a tvbdiretWy of META-INF 


Servlet classes 


Sen let ttjiWl rr.Vi\. be i» & diret-Lwy sirirftwre n>dl&riinu the fiCk^ue 

ftrvtt*rre, plated direttory hnder WEB-INF/tlaHO (for e*a«*ple, elatt tor- 
*^j-pl* Rm«, would b< i^xtdc lV£&~|WVebuei/e«./««4M.f>l«) 1 =»- m *>* 
JpwoPriJ+e patkaae dirfct.ories within 9 . i A.l? m<.dr rVFB-IWF/l.b)' 


Tag Handler classes 


Actually ALL tlastes uted by the web-app (unlets they're fart of the tlati 

librjlnes eh -the tljsspjth) m«rt follow the sjm« rules, ds sfvvlet tljsses— iftsid* 

iVEB-INF/tlasies, >r> d divei-tory rtrutt-re mikkih^ the patltay (or i« -the 
approbate patkaje dirttterie* ^bi a JM ->X-4e WEB-f^F/liW 


JAR files 


JAR file* fci .st be irt.de the WEB-ltVF/lib taWy 
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Memorizing DD tags 

ANSWERS 

II you are gang to take the exam, 
you should spend same time 
memorizing ALL of these (plus any — 
of the olhef s from from this chaptef 
and the secunty-relaied tags you'll 
see in the next chapter). 

A reWn^ -b a fart* that 



A* environment entry is 
J way {a <jet d<|»!oy-tij« e 

tonstdnti into a JZEE 



f& t* <> *C-*-A«d 



?iS j * h ' n * ***** 

W that dW-t ^^tcK J spet^it 
the ^lA^e-fn^i^ 



A, reference h> fl tein t**t 

e-jb-K-f-name -ejb /Customer* /ejb-'iref-Karnt 

<e j b- re f -t ype>En t i t y < /e j b-re f-t ype > 

>com . wi ckedl ysjna rt . Cust osnerHome < 
<lo cal >catti . wi c Stedl y sma r t . Cu a tomer < / 1 Qtral > 

v'ejb-ref> 

• ejb-rtf-hame ^/w^ciwraomaw /ejb-re£-nj*e ■ 

*ejb-ref-type>Entity</ejb-ref-type> 

<t home >ci:.m.wickedlysracirt,CustciiBeEHcinie< jA»fii€ :> 

< remote *ccin • w i « Jted L y smart .rust cmer< /vtmott 
</ejb-ref> 

<env-entry> 

. »¥-chVy-±ypG >jgva, la.ng.rntegBT< /ehV-entry-typr 

<en v- ent r y - va 1 ue> 1 n< / en v- en tr y- va 1 u e > 
</env-entry> 

<e r ror _ page> 

< |o£jti*n -/ir.yerior. jsp* /IflWtsott .> 

</error-page> 

■wekome-file-list - 

<velcrane-f iles-index.html<ywelcome-f ile - 

■ A«k«*< --file- list 
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&m*H ft 



Where i :m <init-pararo> elements appear in ilir DD? 
(Choose all (lirti apply*) 

^ A. As rliild I'lt-rm-nh of <servlet>, 

^ U. As dircd dcace.rsdanis of <web - appl ication> dementi. 

^ (!. |u»i ; i l'i . ■ i ■ 1 1 j i ■ 1>k umejst Type Declaration. 

Q 11. fnjkfc n( <ccjntext-param> elements when yon vratnl m 

rli ■ I.i 1 1' .( i -vl mill ilu.Hl' .11 |HI ■ - 1 1 ' < i ■ " I - 



Where do you store tag Library DeecripitorB jTUH)t i" :| U4 ' lh ■■pi>li l ' ;i| '"" : ' 
2 (Choose all thai apply: 

□ V Diih in /WEB-INF/ULb. 

□ R. Only hi /WEB- INF/classes 

□ CI In ih, /META- IMF directory of .i.|AR Hit- it) side 

/WEB- INF/ lib 

D ]>. Ai tht application'* tup-lewl drrictor^ 

□ ii. In /WZB-rKF in a mb-directory thereoi: 



Whkh statements about WAR tiles are true? (Choose all that ap 

□ A. WAR. Stand* Ebr Web Application Resources J 11 . ■. 

□ M. A v.ilul WAR $k rfttw contain a tfrpluyment descriptor. 

□ C< Sr-ici-.il WAR files tan compose p web app.icaliun. 
D Di A WAR file czdihiI contain embedded JAR files. 
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The following sen-let ' s declared In die Dl): 
<servlet> 

<s e r vlet- name >MySei vie t</ servle t - naroe> 
<s e r vlet- c las a >com . myorg . Eervle tClas s</setvl et-clas s> 
</servlet> 

Where l-;iei you store tlic senlct class in the wch application! 1 [Choose nil lhaL 
apply, i 

□ V In /META-IWFol :i.|.Mi file. 

□ B, hi (In- p.ukLiSL'- related directory tree begintiig pit tin? tup level of the 

application directory 

□ ( .. In /WEB- INF/ classes .>i m ;i JAIi H I ■ ■ in /WEB- INF/lib. 

□ 1). In /WEB- INF/ lib outside cjf a JAR file. 



Wh.ii b fee purpose of fee deployment deacriptoi [Dp)? [Ghopse .Ml thai 
apply,] 

□ A. I"<> idkm todc-generatkin tooh to dyrtanncAll} create ifcrvkua from an 

XML Sic, 

□ Ei To convey the wcb-appltcwtioa tajofigtmilioa kiformaxioa Eroai 

developers to application assemblers and depioycrs. 

Q C. To configure ifendop-specitk aspects i>r r 1 ■ e- application. 

□ D, To tfCutfigure Ofilj database and Eatefpritr Ja^'afieaa access from (In- 

web application. 



When.' should web . XTnl be sO.ircd In a WAR lile? (Choose nil lh:il apply.) 

□ A. In /WEB -INF/classes 

□ I!. In /WEB- INF/ lib. 

□ 111 /WEB-INF. 

□ I). In /META-INT. 
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Given: 

10. <%9 pag* imports" java. util. *" %> 

11. <jsp: import imports " java . util . *" /> 

12. <jsp : directive . page import-" java .util . *" /> 

13. <jsp:page import- 'java . util . *" /> 

Assume ihe prefix "jsp" has brrn mapped to (In: namespace 
http: / /Java . sun . com/ JSP /Page. 

Whii.lt air true? (CIhhw all di.it ;ipp]y.} 

Q A. [juts ID and 12 an- equiviih'ni in ■>< ■■ i\pc nt ISP page. 

□ li. Line in in not valid in ftJSiP ttocunjtftit (XMLJjased document), 

□ C, Line 1 I will properly import the java. util |>,h Lil;<- 

□ 11 Line 12 will property import ilu java. util package. 

□ E. Lbs- t3 will properly import ihe java. util packa^'. 



Which frtater&entft alnntl <init-param> DD dements are true? 
(Choose all thai npfAy,) 

Q A. They arc used to declare initialisation parameters for a 
specific servlcl, 

Ll R. 'I hr'y .ire used Hi declare Lrii tialiij aii o n parameters fi>r an 
en lire web 

Q @, The method thai eetrjeVM these parameters has a sitrnuuire 

thai returns an Object, 
Q D, The mi.- 1 1 ii sd I ha I nHiieVcs I li pEirLimelera tuttes it Slrinjj- 



Which arc UI) tlemerjts that provide JNDI access to JL?EE components? 
(Choose all that appry.i 

□ A, <ejb-re£> 

J I! <entity-ref> 

J t . <o jb- local -ref> 

Ll \1 <9ession- ref > 

Q L <e jb- remote -re £> 



640 chapter f 1 



web app . isploymerrt 



The FdBowidg smln is registered in <he MX 
<servlet> 

<3ervlet-nama>action</ servle t-nams> 

<servlet-class>ecH9.myaiJ:g.ActionClass</servlet-cIass> 
</servlet> 

Choose the conx-cl mapping i'nr this seirlel. (Choose id\ that apply} 

_l A. < s e rvl et - mappin<j> 

< s ervle t -n ame>ac tion< /servlet-n ame> 
<url -patterns-* . do</url-pattorn> 
</3ervLet-piapping> 

□ IS. <s e r vl e t-mappi ng> 

<servlet-name>eom.tnyoEg . ActionClass</servlet-naroe> 
<url-pattern>* . do</url -patter n> 
</ servlefc-ina.pping> 

□ C. <setvlet-mapping> 

<s ervle t - name>ac t i on< / servle t - n ame> 
<url - pa tte rn> /con tro 1 ler< Air 1- pa ttem> 
</ae rvlet-mapping> 

□ D, <3crvlBt-mapping> 

<url-pattern>* . do</urL-pattern> 
< /se rvlet-mappi ng> 

d l . Oe rvl et-mapping> 

<b ervle t -nsune>ac tion< /servlet- name> 
< / aa rvLe t-Biapping> 



lvtr which type of wrh app caropoOerttl Cat) dependeActe* be di luted? (CbOoM 
.Ml ili.ii apply.) 

□ A jsi']iJ<- 

□ R. WAR Me* 
O C ii.iv-i^ 

D O. libraries 

□ ]■'.. 111:1 nilr.il files 
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Which are valid dedaratiuBs in a J&P Docutnenl 'XMMwsrtl ffociantart}? 
(C boos* ill I lIihi apply. 

□ A. <jsp : declaration 

xmlns : jsp="http : / /java . sun . coiE/JSP/Fag;Q"> 
tnt x = 0 ; 
</ jsp : declaration 

LJ K. <j sp r declaration 

xmlns: jsp="http: //java, sun . com/ JSP/ Page" > 
int x ; 

</ jap; declaration 

□ C. <%l int x = 0; %> 

□ 1) <fc! int x; %> 



Which 2,4 deployment descriptor pjentenfc tuny appear before Lhr <wob-app> 
element? CGhoQSe aU that apply 

□ A. <listener> 

LJ M. <context-parara> 

□ r. <servl6t> 

elements may appeal Uelftre tht> <web-app> element. 



\ 1 rr ■ 1 1 Hi: imlt rrniccpiiiil^ iIm' i ri|if:ii||i'r iJhsk IikhW ;<ir- 1r>lf J 

[Choose ail thai apply.) 

Q A. Wch upplkiiLiuns hIkhiIH NOT attempt lo encrridr ctjiilnincr 
implementation flaSSet, 

Q |1 A web application nistji not attempt ta load rcstHrrccs Irtui] 

within the WAR nil* using; th'ej!>SL vmuuitMN ■* ■ I " u'-iK'-wui i i 

□ 11. A web application may override anyjSKti classes iu the java.v* 

namespace, 

Q D, A web ck'vcltiptr may override J2EE jiliilform classes provided 
(bey Urt contained in library JAR within ll WAR, 
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Where < :;m <init-param> element* appear in the UTT^ 
(QhoOae- Jill linn Apply 

A. As child elements >>l <Mrvlet> 

Q B. As direct descendants <il <web - app lication> elements. 

□ £ [, Juan ulin- the Dofunieill Type Decoration. 

Q D. tiiaidc of <contgj[t-pajraB> ct&meiiB when you want 
detl.ire a CQMCXl miiiali/.,ii]'ni piirniin-trr. 



B is intorrett be««« 
wcl *>*l does not contain An 
element na~ed <web~app!-taW 

- Opto* t> is intorrett be««e 
<£ontent~p3*~a''« > elements do 
not Contain -Unit-far a** 



Where do you mow Tag Library Descriptor* :TLO*!. In ;i web application? tJ£P ft 
□ A- Only in /WEB-IKF/lib. 

Q R. Only in /WEB-INF/classes. -The t-ohUiner wilt not automatically 

<: )^ ^^ KF ,lM " I!,IV "' ■ lJA,i ft! " SV^^^ 

Q ]X A i i lit- applkstifan't top4tvc1 directory. 
UJ K. Iti /WEB- INF or a iiih-directoty tfieppoE 



W liic-h -statements about WAR iiles are true:' (Ghoose all that apply.) 

□ A. WflM stands for Web Application Resources J 11 ■ - . 

fif I!. A valid WAR file mm < nniain » deployment dest apt..]. «fcands -for Web M^e. 

□ C. Several WAR files can compose a web application. ah j p^tiom of 3 web apfkit'On 

□ l>. A WAR lilt- cannot contain embedded |Ak tiles. ui*ot be t«ita»«d * a WW 

file; onty an entire »»«« <*" 
reside wrtfcin 3 WAR Vile. 
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* <servlet> 

<s e r vLGt-aame>MyServlGt</ servl e t - name> 
<SQrvLet-GLass>aom.nyorg. ServletClass</sQrvlet-class> 
</3ervlet> 

Where it.iii you ittnrz the scrvlct class in tin* Web application? (Choose all ihal 



□ A. In /META-IMP-.I , | AK Hfc. 

U l< lii iIil' package-related directory tree begining at the tup level of die 
n|ipli( .ilinll rliii'i Inrv. 

if G, In /WEB- INF/classes >i in a JAR Rlf in /WEB- IMF/ lib. 

□ D. In /WEB- INF/Lib outside ol' a [AR Mis*. ^Qv^^ £ ii net tervett beda^e MEEMNF/hb 

it desi^d as the fiordW I* JAR «•* 

SWfcm is the purpose of tin- deploymenl descriptor iDl))? [Choose all iii.n (Servlet sfei p JO^) 

□ A. T» :illou cfirlr-^iieTatkiii tooli n> rlviiLiuiii ;lIK create terVkt* from an 

XML fat 

B. To convey tbe wc-b^application eottfiguratiorj inltirniinirni Bxao 
dcvclrj[H*rs to application assemblers and dc-pluycre. 

Q C? f To configure peiKlor-specifit aspect* of tbe application- -Dptiw P « i^t^ste 

□ n To configure only datftbaw aad F,im j]>ri*ii*.J.iv;iB< ;iii ,m i >.s inim iln- 4 s^ttST-be 

webappiicfttioa p&£y*pti, 

Where should web. ml Ik* stored in a WAR (JJef iL'.hocnc all lh:il apply. ,i (Gtvvlei it^tfi f 
° □ A In /WEB -INF/ classes. 

□ \y In /WEB -INF/ Lib. 

^ G. In /WEB-INF - we b.*ml sWd be stored m /WEB-1NF 

□ I). In /MET A- INF . reaa«rdl«K «-f whether tbc de^oy-eft 

bt&ttl 3 WAR or a» e^Wrd d«tt*-y 
st*-wtti*T-e 
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<;iv,-n: (j£p *i& ?5 vM^ 

10. <%@ pago iraport="iava.utiI.*" *> 

11. <jsp: Import imports" java . util . *" /> 

12. <jsp : directive, page import™" java .util . *" /> 

13. <jsp:page import-" java . util . *" /> 

Assume ihc prtJix "jsp" has been mapped to ihe namrspare 
http : // java . sun , com/ JSP/ Page 

Uhtrh are true? (Choo* all .ha. apply) ^tjj invalid b, a JSP D«*- en t 

Q A. Lines If) and (2 tire equivalent in any type of JSP page, ()<^1L.-bas*d dt£un<e*<{). 
Ul I! 1 _ii ■. hi ^ !, .i .id in a JSP document (XML-baged tfocumeiitj, 
LI <_', Line ] 1 will properly import ihi 1 java .util package, 
U. Line 12 will properly import Ite^util ^ 
□ E. Line 1 3 will properly import the java . util parknge. hity //ja^un fiW JSP/ft^e 



r^kt **** ■ * pp 

Which tetementt alnxu <in±t-parani> 1)D elements are true? 
(Clhuuse all that jpplv-! 

r -\tA.\i\nliur* para««t<w tan 

U A 1'Im \ ,uc u-ril h. i lecture initialization parameters for ;i ^ t we ^ a pp i(^t or setwlet 

specific scrvlel. tftfft TWie wth servltt 

□ B, Tbcv are usctI 10 ttecbre iniimlifcatiun parameters for an *»f* *■< «*««* <wnl-f*r»™> 

LI G l hc method that retrieves these parameters haa a signature app sd<??e are na^ed 

. Hum returns an Object. ^tAx*^^^ 

IB 1) 'I'l,.- mclhud ihut relrirViM thrse pnniim-ler* ink. Siring a*d also bke J»d <r*ti*rn a 



Whi h .ire DD dements that provide [ND1 access to components? , t A []) 

(Choose all that apply.) ts( * vlct *~ 

\£ A <ejb-re£> 
□ IV <entity-E»f> 

C. <a 3 b-local-rcf> -|« addiW < e jb-1flUl-*f> r™" ao 

□ ^ e we fe up treator with a JWI 

Li I: <ejb- remote -re£> 
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The fulbwing nervlrl is rrgiMtrnl in iln- Dl>: ^ ^ ^ 0t) 

<servlet> 

< se rvl e t-name>action</ servl e t - narae> 

<se rvl a t-el as s>cont - myojeg - AetionCl as s< / serul et - c 1 as s> 
</servlet> 

Choose the correcL mappings lor this sfrvk-L. i Choose alt that apply.} 

^ A. <servlet-mapping> 

<servLet -narae>ac t ion< / servle t - name? 
<url -pa tto r n> + . do< /ur 1 -pattQrn> 
</sq r vie t-mapping> 

— 1 l! <sei^let-in5Lpping> 

<serv Iflt- name>eom . ray o rg . Ac tionc lass< / servle t- name> 
<url- patterns-* . do</url-pattern> 
, </serVlet-mapping> 
2 C <servlet-Diapping> -Crtioii Bu interred feuuic it 

^ervlet-nain^action^ervlet-nan^ ^ JJ^™ ^ ^ 

<url - pa tte tn> / con tro i ler< /url -pa t te rn> 
< / se rvlet-mapping> 

□ I) < 3 ervlat-map P iTig> 

<url -pa tte r n> + . do</ur 1 -pat tern> 
</se r vlet-mapping> 

□ £. ^rvlet-iEappincp _0 f Un D » ^*«et ^» * 

< Se rvL G t-n a m E >aGtion</ servlct-™^^ r/'^'ji t 



Kjr which »ypc- of wrh .i|jp ioni|nintrtiis ran flept-nckwit'K he deffotft? Pfooft f sprV ^ s?et 
11 all thai &ppty.) 



□ A. JSP files 
B. WAft files 



3 



-> C dass ^ _ Ukaviti depe^«*£io tin be def 

□ I'.. Iliilllili'Sl lilfs 
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Which an; viihd declaration* in bJSF Documcttl fXML-hnsedl document:-? USP ?3 

[Choose nil dtat apply.) 

>id A. < jap : declaration 

xmlns: jsp="http: //java . sun.com/JSP/Pag-o"> 
int x = 0; 
</ 5 sp : declaration 

4^ U. < jap : declaration 

xmins l jsp="tittp : // java . sun. com/ JSP/ Page"> 
int x; 

</ j sp : declaration> 

_ ^(hkons C and D 3rt ihiorreM, 

□ IS. <%! int x; fc> btMi^e e«e/ <jsf d*£lsiriW> 

*yr,t** is «lid j» JSP D«£>-«^ 



Which 2.+ deployment descriptor dementi mav appear before the <web-app> . , , _ \ QT) 

element? (t:iK><> s <- aU thai apph. tSer * ;rt ^ ' 

□ A. <listenet> 

□ IS. <context-param> » . j. 

□ ( <^rvlet> Jf VI A /tW™ d tf l^ ***** 
u Dh No XML elements may appear before thi <wefc-app> element. 



Which •ii:iTcii)r-nEK dtsocernlng flu- i-mituJwr i ]■ ii li-r ;iir- t put--* (Seevict spe tj 

i i se .ill ih. n apply.) 

B A. WeLp .i[j]jlkciLiurj.i slnpukl NOT LiLLem(jl Up uvecpkle euniain- -i 

LltinlcllLi'lUiilHUl classes. _ tfc 

1 -Opto* B >* Correct l.etJ*W V* 

LI H. A web application mu»i n« nticmpl to load resources ln>m ^^pp may the ae^Resouree 

within the WAR file usiiifi thcj25E semantics of victRcsource. ^^tKod -fre** the webapp'i tlaw 
□ I . A web application may override- aityj2.EE classes in the javux * l^er \» attew any wAft file 

namespace* 

G l). A web developer may override J2EE platform classes provided -0p-fcie*i C \ D are ir£*eefrt 
they we contained in a library JAR within a WAR. be£ju« the wrbapp nust NOT 

override any daw in -the java.* 
or ja«*.* Hamespacir- 
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Keep it secret, keep it safe 




Your web app is in danger. Trouble iurks in every comer of the 

network, as crackers, scammerfc. and criminate try Id break into ytWJr &jf£tem 

to steal, take advantage, or just have a little fun with your site. You don't want 
the Bad Guys listening in to your online store transactions picking off credit 
card numbers. You don't want the Bad Guys convincing your server that 




much as tie does? And do you really want Jim to take matters into his own hands 
and login (unauthorized) to the UpdatePayroll servlet? 



in 3 rtew chapter 



official Sun exam objectives 



Wet Application Security 



Coverage Notes: 



5.1 Based on the servlet specification, compare 
and contrast the Mowing secunty tssues: 
(a) authentication, (bj authorization, (c)data 
integrity, and (d) confidentiality. 



5.2 In the deployment descnptor, declare the 

following: a security constraint, a Web resource, 
Hie transport guarantee, the login configuration, 
and a security role, 



A/I nj tttr nhjfftirts in tfiit .ifffinjt (iff coTfitd 
(amptettfy in this fliaptrr, including secuntr- 
fi'tdtud DD fltmeaii that tttrt ,\'OT topfifd in 
tht AvphyiMHt thuptn. 

II \ ain't m/dr jvh a rniitph.tr imtiily bring, 
bnt the foiilnit in t/m tiwptrr it a start, anil 
it's everything you nerd fir tht f\nm. 



5.3 Given an authentication type [BASIC, DIGEST. 
FORM, and CLIENT-CERT), describe its 
mechanism. 
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The Pad Guys are every where 

As a web application develops jwi need t" protect your wl> Hie. 
There :ni? three main kinrta of foarf ymi need to Wfttcfl mn for, 
Imp«rK(vnnl(HTM. .mil F-nvf ^dropper* 
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svif eavesdroppers 



And it's not just the SERVER that gets hurt... 

Eavesdroppers can bt llu> w<v«, Mot pftjj ais* \ trying WJ 
your «yA rt^/i, Iiim they i;m born some of your good f/fimfo too. A double 
liit. ir an eavesdropper is suoeeiaftd, he'll swipe your client** credit e&rd 
information wad charge up ;i storm. 




Innocent User 



-osi .-'Checkout, jsp 



Look Daddy I We 
hacked that h4y$ 
credit card number. .. ( °, 



j 




Server for:. 




EviJ Eavesdropper 
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The Pig 4 in servlet security 

Si-rvlel m i ufity help* you — thf app develop** 
I nil Trnpi'rsofiaiws, Upgrader-i. unci Knvi'MlrupiK-i-%. 
As l^r <is ihc Kfrvlfi specification is concerned >;ind 
hence, iJk* exam), icrvlei security boljj down to four 
main concepts: authentication authorization, 
confidentiality. and data integrity. 





Server 



0 Authentication 

(to foil Impersonators) 



AuffioTizatfaii 

(to foil Upgraders) 









■ [MX 1 






















©Data Integrity 

(to foil Eavesdroppers) 
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Bob's security project 



A little security story 



Jay Bob's boss h into bis Hifllcr, "iVe 

got an exciting new project lor you!" Ins boss 
said- Boh groaned, V I know fVe bunded you 
some bad jobs in [he past, bm ihis one should 
Ix? really lun... I'd like you to design the sect, inn 
tor our company's new eCommerce web site." 
"Security" Bull said, "is hard and boring" "No 
you Ve wrong..' rhe I toss said. "In ,[2KK I -4, sctvI« 
security is supposed io he pretty cool." 

The bmt continued, "Ln me gjwe you the elevator 
pitch to gel you going, then we'll go into deutSa 
oace vohYi- I ^id ^ chance m ibink this through." 

"Dk." Boh sighed. '"Lay it on vac." 

"An you know, (his beer website is really hot tight 
now. We've added several new features, and we're 
getting it great response. Some of our users are 
happy with jus) \\wfrtt rt-* ipes we offer,, hut a lot 
ntorc people than we though, are willing to f«n 
l"i "ur rare liops .mil ..iIh i premium inured inns, 
(tli. ..md niir Frequent Brewer [iff 114,1 am is a fmue 
hit, It' a user decides he'll Ik* a repeat ingredient 
buyer, lit- can pav a one time lee and upgrade to 
Breie Muster status. A Brew Master get special 

(bscolllMs, .mil cutis f-iujUmi Jhwi points Which In 

can redeem for cool htm rewinds." 

Hhi|i continued to listen, menially calculating the 
code he'll have to write to implement all this, and 
kissing that tropical vacation goodbye. Meanwhile, 
the bow continued .. 

"till! nOW We MaVe lo ULiike h l I if iiiat Wfldl one u\ 

mir users makes a purchase, no one can swipe bis 

i ieilir 1, ml iiilurnuiiinn. Oh. iuiolbrr ibiug we VI 
belter make siure that when a mcmhfr logs in, il's not 
actually one of his friwds trying to sneak in. 1 think 
we need to require that members have passwords 

frOTQ ROW mi " 



-h's ill] making sense no rati*" &ffl Boh. "When user* 
place an order with us, do wv want lo givi them 
smiie son itj eon fin tun ion code?" "Great idea." 
said die buss. "Oh, and one more thing I forgot— 
you better make sun- niilv ■■■11 Frequent 
Brewers get the special discounts." 

"L think this is. enough," said the boss. "But you 
know... the way things are going, il probably won't 
he too long before we offer: some sorr or platinum 

UU'tVibei'ship |e\'e|..." 



FLEX YOUn MIND 



Which security concepts are 
mentioned in the story? 

Reread me story and ariootaie the places where 
Ihe boss's requirements call for. 

- authentication 

- authorization 

■ confidentiality 

- date integrity 

^Vftfth Linnh ,h*A Ijnju ■* 46iir< if- yiSinniir hill iiw fa ihn*f 
^ H?(l| I, JPOI I, »f HI IS"fY 11PI* IS VWTJ^WS, MMI IV J«J-=C 

warming up lhe topic before it gets dawn and dirty ) 



654 chapter 12 



web app security 



pueM 6^ »ft«T«!|*> ^—p*! 
^ f j- ty*"* 



P W 



•op eq. }uf*. ^ ^» op p>*o||t 

JuA^} *$N 0!f }up» 



^'■'JOA* clll| r J,K|llI-'LLI 

uinui/ojif jo uos jiiios Jsjftp 3M Jii'i»C| iiuoj ooj jq 
l.tum A|qi:quid 11 'Suiina ,m: *jJimp /:a\ .up "■uuits 
no.\ mg„ law) .»<p pn» u 'x{imf> pttp Jfpgjnu 

■sinn[».}M|t [epdds .up iaS M**ft3 

.1114 1 ijUl) 1>'I|1 .11 MS .l>)1MM ljf|.>t| Mlli I Oil' 1 < * I J 
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-i.-vrW uj iniiAV 3M op 'sn ipiM .uipio up mjujiJ jjsh 
r U0l k\\,. q°H Pf RS *'■"■} " s WttW iJiinpiiu |pt s.i|„ 
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HTTP authenticau an 



How to Authenticate in HTTP World: 
the beginning of a secure transaction 

Let? rtail with .1 Imtk ai the rommunicaiiiuis ih;ir <<< > ur 
h<-nvfi-ii .1 liruwsiT rtiid a \u h mjir.iint'i when ihr client 
for ;i umin? ceB$ni«e od the web sift, I< ^ liAMC n: : »1 ly. 



The HTTP perspective. 



Web 
browser 



Client 




fib server 



1 fhe browsei nakes ;i request for a 

web resounoe : 'update.jsp". 

2 The server determines tJiat 'update 
jsp' is a consirained resource. 

3 TTw container sends back an, HTTP 
401 ("Unauthorized"), with a 
wAiw-aulherrticate header and realm 
information. 



Ike HTTP header used 
for Ju't^eni'tJ'tj'JP 




SET /update. jsp 
^uThorizaTion: 

Basic; >r5^3... 




4 Thebrowser9eisthe401.and based 
on the Realm info, asks the user for his 

u sememe and password, 

5 The browser asks for '"update.jsp" 
again {stateless, remember), bu! Ihts lime 
tti« request includes a security HTTP 
header, and a usernams and password. 

6 The Coniamer wr'fies lharthe 
usernameand password match, and if 
they do, performs authorization*. 

7 Ifallthasec-iirity sEuffisgcod the 
Container returns trie HTML, if nol It 
returns anotfier HTTP 401 .. 
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A slightly closer look at bow the Container 
does Authentication and Authorization 

Un the last page we skimmed over what the Container was doing. 
ThrouKh""' 'hi* Hwpier w'll hit diil'm-m level* of detail, md hc« 

we ZOiSTll ill jusl ;i lillle... 

The Container perspective., 




T<tbit 



1 Ha ving received Ine req u est. 
the container finds the URL in the 
'security table" (stored in whatever 
the Container is using to keep 
security info J 

2 If the Container finds the URL 
nthe security tablt il checks 

to see whether the tequesled 
resource is constrained. If it Is, it 
returns 401... 



The Initial request, NO password 



Client 




— T~Dv 

Bab. 5 a Jtx 
Sazi.T 

Aab. S A, •fry - 
Su.T Clerk 



Security 
Tobfc 



The second request, WITH password 



1 When (He Container receives 
a i truest wiUi d useiiianie did 
password it checks the URL in the 



2 If ii finds the URL in the security 
table (and sees ttiat it's constrained), 
it checks the usemame ant) 
password inf< 



3 If the usemame and password 
are OK, the Container checks to see 
if the user has been assigned the 
correct 'role' to access this resource 
(i.e. authorization), If so. the 
resource is returned to the client. 
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How did the Container do that % 



You just got an overview of bow the Container handles 
authenticatitui and authorization* Bin what was Kbit's 
isii inside the Contamrr thai made -ill ih;n happen: 1 I> j i'k 
-.|m i ulatc a Unit- an whai wa^ [Tuinu on behind ilic scenes, 
deep down in the licurl bf the Container.., 

Things the Container did: 

£T) Performed a lookup on the resource 
being requested 

Wi already know that the Container is really 
Hi>nd j[ litjciinu n;*niir». liui now, onee it finds 
the retource, it ha* in detennine whether it's 
;i resource thai Mjwwcad vit-w, or whether Hit- 
resource lias jtatlit) fomtratnh. Doe* thesctyhM 
itself bavc some son of sreurily Hag:' Is there n 
table wmewhrrc? 

@ Performed some auffientfcatfon 

Once the Container determine! thai it 11 * dealing 
With a secured resource, il lia* lu mttbfntktitt 
the tliont. hi other Want** to find out if" "Bob" 
really is {lob. ("The most common way to see if 
Bob knows his own password 




Server 



FLEX YQUH MIND 



Performed some authorization 

\ Jnj i- [ IjJJltSjjlEr dl^fC ["!] ! !I3C ^ ll^H! Ll ihc JTC!l! 

l!i»h asking lor tin* resource, (Jic Li'mtamcr has 
in %sv whether hob is nt lowed access tti thai 
irsollHr. l.rl'v see, if sw bflVC 2,000,000 Users. 

.11 id joo tervlctt in our webatpp, we could throw 
together ,i link- Bible with 200,OQQ#00 coBji.. 

Whoa! 1 his eould get out of hand in a hurry if 
we're not larcful. 



Which bits of security logic 
and information should be 
hardcoded in the servlet? 

names and passwords'? 
users roles? 
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Keep security out of the code! 

For most web apM) iniKi Hi ilif linn-, ilit' we!) wruHty 
constraint!! slum Id be handled itttofntitdfj, in the dcployroctrt 
descriptor. \\ \\\ * 



Top Ten Reasons to do 
your security declarativeiy 



Who doesn't neod 



mor& XML practice? 



Looks great 



°n your resume. 



■ exam 



Alfows application developers 
0 'tsjust cool. 



(l) Supports the idea 
development. 
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who does security 



Who implements security in a web app 
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km 



v I'm e a n fused— If I'm crea ling servlen, 
shouldn't J be thinking about security considerations? 

Yes. you should; Kim the servlet provider was 
being a little sarcastic. A key point when designing 
servlets is their modularity. For instance, it makes 
5 eme to separate browsing capabilities from updating 
capabilities. If these two use cases are implemented in 
separate servlets then it will be easy for the deployer to 
assign different security constraint? to them. 

Q," I don't know where YOU work, but in my 
situation I have to wear all three hats: developer, 
admin, and deployer. 



A 



That's actually a very common situation, We still 
recommend that when you're implementing security 
you do it In stages and "imagine" that you're wearing one 
hat at a lime. 

How does programmatic security fit Into the 
picture? 



We'll get to programmatic security later in the 
Chapter* For now, what's important to know is that you'll 
probably find that SS^ of the security work you'll do in 
servlets will be declarative. Programmatic security just 
isn't Used very much. (See "Top Ten Reasons.,.*) 



0: 

So far everything you've talked about is related 
to authentication and authorization, how about the 
other two itiThe Big Faur"7 

A: 

Xj. We'll talk about confidentiality and data integrity 
latei an 1 his chapter The serviet spec ific atinn males 
implementing these concepts very easy, so we're 
focusing on authentication and authorization because 
they're the most complicated to understand and 
implement, and, hint hint, more likely to show up on the 
'jxani. 



O: 

It seems like when people talk, about servlet 
security the term Vol*" is overloaded... 

A: 

Xi Good pojnt! When Sun designs J2EE specs 
(EJBs, servlet s, JSPsj. they often think in terms of the 
kindi of people who might create and administer these 
components- In other words, |T-related/q{i roles When 
developers tackle security for webapps, they think aboui 
the types of users that might exist. For instance a "guest* 
might have ve ry fe w privileges wit hln a we b a pp, and a 
"member' 1 might have more privileges. These "user roles" 
are defined, mapped, and fretted over in the Deployment 
Descriptor, 

n^, I 've hea rd a bo ut som ething « a 1 1 ed "cros s-s i te'"" 
hacking. What is thatT 

A- 
* Cross-site hacking, can happen when a website 
displays Free form text entered by other users Mot 
instance, a user book review.!- If a malicious user keys 
some HTML with, say, Javascript into a text area, and 
the server doesn't catch it, then unsuspecting browsers 
will render the potentially dangerous hidden code along 
with the good HTML when the page is served, In other 
words, the server sends to users something another user 
lyped in, without checking or processing it for malicious 
scripting code. 

Q.' S o we've got to dea I wit h "The &ig Fo u r." H ow 

i i [_ t li I i_ : i :_»_:_ *i i 

Piupu li ii iu sei intac udum upanu inuirimin iiiKin, i 

mean is this going to be painful? 



Yes, we're afraid il might hutt a tittle. Actually, 
some aspects of security are really low overhead, while 
others DO require a fair amount of work. But none of it is 
very compikated, just potentially tedious. 
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security Jobs 

Ths frig Jobs in nrvkl security 

The table below vn& give yon a (fed For (fee key item* in soviet 

-n nr if ;,. Aitthtirizilfiitn i- lln- iiloM I inir-cn h i vuminLi In illi| liriin 'lit 

.iiid 1 1ij//i/TFJ//i"fjj'i«n is [text, From the serylel perspecl h e, 
Confide nliality and Dftta [megrity arc pretty easy to id up.* 



Security 
concept 


Who's 

responsible? 


Complexity 
level 


Effort 

1 aural 


Exam 

importance 


Authentication 


Admin 


medium 


high 


medium 


Authorization 


Deployer 
(mostly) 


high 


high 


high 


Confidentiality 


Deployer 


low 


low 


low 


Data Integrity 


Deployer 


low 


low 


low 



chafer because it's die most important and 
complex of tie vendor-neutral security concepts. 



*.Vr.u.ills. ni'LliiiK the KM. L'erLifiL'iiiiiiu is aul trivial, sn by "easy" 
WC menu _ >tiii rlmi'l rriilly tU> anything in your icrvlrt rodr." 
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Just enough Authentication to discuss Authorization 

Later in the i hapter m a go deeper una authentication, bat i<>r now we'll tool* at gettingjutn 
enough mUkmiuutitm data iim> the- system mi that we cm focus on nuthanz/ilhit, A user ean'l be 
(rttlhim.yd uniil he's been mthnitwaUd. 

Tin- jcrvJci specification doesn'i Talk aboai Jhw a Container should implement tnvp - 1 < •< 
authentication data, including iinemanics and passwords. But the general idea in that the 
Container wilt supply a vendor-specific table containing usernames and their associated 
passwords and rnles. Bul vintiulK -ill v. n dors go beyond that and provide a way In hook into 
your c ninpany-specifte authentication dura, often stored in a relational database or LCkr\l J system 
{which h beyond the scope of this book). Typically; this data is maintained by the ««li>iiniMiai«i. 

The security "realm" 

Unfortunately, realm is yet another overloaded term in the security world. As far as the scrvlcl 
spec is concerned, a realm is a place where antht'tilicatioa in! or mat ion is stored. When you're 
testing youi appli. aiimi in tomcat, you t an use .< file called "nam at-iiscis.Nml" (Ideated in 
tomcat^ coflf/direi lory. NO T within webapps.i. That one ''tomeat-Userf^Xnir file applies <<> AI.I. 
applications deployed under wrjb-appt. It's eommonly known ;i* ih<- memory realm bceitttK Tomcat 
reads this lile into mciimry at ^l^irl up lime. While it's great lor testing, it's not recommended lor 
production. For one thing you can't modify its contents without resinning Tomcat. 

The tomcat-users.xml file , 41 

<t«poat-tt#ifs> (ft****** ■ b ^ 25* 3r A *fc» 

<role roleiians&="^UGSt"/ > you »J? W*** w y<^*™< 

<role rolename-"Mf;mbRr"/> 

<user usarnar»="3ill" p*ssword="coder" »las="Meniber, Guest" ?> 
</toiticit-Q3£>rs> : ^ 



Enabling authentication 

I" "-I .iinhi'tilt', .iiii'ii untlinii 1 in i.thri winds, in grt tin- Container to ask fora user name 
and passwnrd^ you need to stick Mimeihina in the DJD, Doii*i worry about whal iIiLn means 
Inn if yon wain to atari playing around widi umhnnicaiion, ittc diis: 

< loijin-cortiip- , ^ ^ * *>« 

<i»nch-niet:hod>BASIC---/flurh-riethoci> .. r -a lajV. aw 9 "? ... JD „ wee* " 



<auth-rnethod>BASrC- /flLil-h-reth™i> ^ t^V. a" 0 "?' ^ ** e£ * 
,/login-confio> ^r^V 
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defining r -securfty-rate> 



Authorization Step 1: defining roles 

I'h i.' most ii.ifismi iei fottn of Luiilii.n'i^niifiii in lervletB h for iJ n.- container 
in 1 1 ■! i'ii nine whether .1 specific strrvlei unci rlic invoking HTTP request 
method * ;»n I" 1 catted hy rt user who 1 1:1s hern assigned :i rerun n 
security '"rule". So the first su-p in n> map the w/n in the vendor-specific 
"ustn"jiif let W« established in the fkphfraad Dt.frrif>tw. 



VENDOR-SPECIFIC: 

The <rofe> element in tomcat-users. xtnl 



Annie is aii "^dmin", 
a "Member" .and u 



fit 

nsm and roles 




Diane is bath a 
"Member" and a "-SucsT". 



< tomcat -nee ca> 

<r ole role najie=" Admin " / > 
<role EoLename=;;»eniber r, /> 
< ro 1 e to le n«une= " Gije 3 1 r 7 > 

<as»i use r name = "Ann *2" pasiiwatd^admin" tolas* "Admin, 

: nefetftant^^Biale" p£L6stfi^d="'0Mifct" rolba^MHHber. Guest" 
<user i:Kernarne^"TE?dl . - i="newl! 1 • " "Guest" /> 
< /tomcat-users* | r. I tfawM 



Guest' 



SERVLET-SPEC I Fl CATION: 



fionkiner vwJI njp ib *tndc«r- jpet<£ i£ Vole" 
finds in your DD'i <set»rity-role> eJemehts 



TJ>e DD <securify«ro/e> element in w^xml 

<secuEtty-tolexrole-n ame > Admi n< / r c? 1 e - name x / se cur 1 ty ~ r ol e> 
^ ss cu t i ty - lo 1 sD*^ £0l5— n sirs >Ksrr i i!^r < -- / s ~ n sjes X / sscuri ty - £cji s 

<security-role><role -naDie>Guest</ role- name X / security -role> 



<loe^**nti^ * — D**'* *»yt tK»t y~ akay* need tWe 

•.■iuth-meth'Mi'HASI'Jc^uth-jiii&thol - <loj<n-tcM-ig> element if yo« want t» 

The deployer creates <rale-riame> 
elements in the DD, so that die 
Container can map roles to users. 
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Authorization Step 2: defining 
resource/method constraints 

Finally, the cool pari, This is where we f^et to specify, dfrltiMtivth. thai a 
given regource/mcthod combintUion i* Accessible nnly hy ttseni in certain 
wfer. Vhwt {>r llif security work you'll do is [>mbnb]y w iclt <st'curity- 
rtiiisLramO elements in your DD. (Luis "I picky rules later-} 

<security-constraint> element in the DD: 



''.wsb ' app . . . > 

< security- constraints 

w<=fc - r a 50 ur ce- c ol 1 ect ion > 



<j web-re s ource-name :>Updat eRe c ipes< / web-res ource - name > 

■ . li l I - pa 1 1 e it: - /Bee l / AddRecipe / '*</ar l-$*tfce*a> j 
< u l L-pa 1 1 e rn > /Beer /Sevi ewRecipe u r 1 -pa tt em > 



ctittp-methad GET ^http-rtfethosd? 

<http-method -•■POST</htt.p-niethod> TV <hti|^iP!rB»d> ele»<nWs) 

demnbe wkiil, HTTP mt&adt arc 
</web-re E ouEce-collection. tanstwiKd freWed) f»r the 

. _ . mei«.r£es defined by the URL 

<rolo-u^:i,._ Jldrairi-f/role-nitiie> , ' ' 

<role-twne :'Mtib*t< /role -name > vv» ™* of ™" ai ^ u ^-^»^*-airit> de*«fci 

</auth-con3traint> 



< /security-constraint > 

Snth rif \f. nrp. rafinwRd 
to do a 6£T and POST on the 
resources m the /BeerMddftecipe 
directory and the /Seer/ 
ReviewReeipe directory. 



^ *bi£h ro\v CAN th e ' 



^ Merr 




Admin 




Because they're in the " Member " 
role. Diane ond Annie con do 
GET and p OST on resources 
that fit the <url -pattern* 
elements. Ted is only a "finest", 
so he can't do o SET or- POST. 



&J£$t 



you are nwe * 665 



<s&curity~CQ ns(raint> rutes 



The <securitY'ConstraiMt> rules for 
<web-resource-collectton> elements 

Rem era Wr; the purpose of the <wh-ies<jt]rie-i*tillei'i:i<iii> 
sub-etetnent to tt-ll the contajttw wfrich resounds .iml 

F I I F l J \[t-ll|i)H bin, 1 1 1, i! ■ -.1 Ill hr , ■;ti\;> l :it,.t: m -i:- li 

a way thai ihcy can br accessed Wily ')>' iltr roles in ilit: 
corresponding <auth-constr:iinl> tag. We wish we could 
tell yt»u to relax here but you realty do need to know the 
details of these elements, ll ynu make ■■ ■ ■ i r ■ licile mutakc 
in i Fie security part of yanst 1)1). you could lease iIk most 
sensitive parts of your app open k>... mrpm. 



The <web»resource»coilection> sub-element of 
<securtty-constraint> 

( wf=b app. • , > 

security-const raint > 

<weh-rosoi]j c«s-co] 1 ecti orp 

<web-reso iirce-naioe> 

Upda teRe-cipe s 
< /web-re sou rce -n anse> 



Key points about 
i — <web-re$our«-tolledion> 



The* ime Uf diret^on^ 
with ttmsir^l*. 



<u rl -pa t torn> / Beer/AddRecipe / *</ ur 1-pat tern > 
<u rl -pat te rn> /B^er/ReviewRec ipe/*</ url -pa t tern> 



<htt p-ma tbpd ■ SET- 7 J it. tp-me t hod' 



<aur h-mnHt.ra \ n±> 
* / au t h -tiofii5 1 1 a i Ji t > 



</ web- resource- col ±ectioii> 

TW,i kit the ejfcT 

^ by the ,<J n d f fi„ ed lft & 

< to»b-«{ w i 0 -they 4j n ^ 

J«f«ed by a^e. 



► The <web-re3ource-collectit>n> elemeni 

has two primary sub-elements: 
<urt-pattem> (one or more) 
<tittp-melhao> (optional. 2ero or more) 

► The URL patterns and HTTP Methods 
together define resource requests that 
are constrained la be accessible by only 
those roles defined in ^auth-consfratnt*. 

y A ^web-resDuroe-name:* element is 
MANDATORY (even tfiough you probabty 
won't use it for anything yourself} 
(Assume it's for IDE or future use.) 

► A description? element is OPTIONAL 

► The <url-pattem^ elemeni uses sarvtel 
standard naming and mapping rules (rater 
back to the deployment chapter for details- 
on URL patterns). 

► You must specify at least one 
<url-pattem>, but you csw have many. 

► Valid Methods tor the <http-method> 
element are: GET, POST, PUT, TFiACE, 
DELETE, HEAD, and OPTIONS. 

► If no HTTP Melhods are specified then 
ALL Methods will be conslrained (which 
means they can be accessed only by the 
rales in <auth-canstraint>}!' 

► If you DO specify an <h1tp mothod>, 
then only those methods specified will 
be constrained. In other words, once you 
specify even a stngte <http-method>. you 
automaicatly enable any HTTP Methods 
which you have nor specified 

► You can have more than one 
<Web-resourcfrcoliection> elemenl in the 
same<security-CQnstraint> 

► The <aulh-consiraint> element applies to 
ALL <wer>resource-collection> elements 
in the <$ecurily-constraint> 
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~ . aint* are not at the RESOURCE level, 
SSSlnS Z T*e HTTP REQUEST lev.l. 

C(jm t,rna(» n of resource + HTTP Me ho tf 8 £, nStra , ned reS0 arce wifft 
MM-, wfifll you're * '^SSSS on *l HTTP BWtfMd °y 
, eS pe Cf to HTTP GET '■ A ^ u *f ^'"^ 

™» 

<MtfHtwtfiod> elements. 

^mam Haas NOT define whicn n>fos are to 
The o^h^sfrarnO element ctoas WC u wnnj d R 

wM* roteS«i eKayWrf to mafce the ™ e| - Jf?stea d s3 y "Boh <fe 



If you specify 3n ^ito-meth^* „j 

methods you do MOtT«c 1 a " HTTP 

n>e weir serves to S t WF - — " e0i 

HTTP JW GfWs , Q fa9 UNconstJnSlltl^!! fTf*" * ^ *■ 

"wans anybody. fega^ fess t*s£***i, , , 1 tc ' 9fB not c°nstra,nedt Thar 

•** ^ 'SIS & ££^&£ffi*^ ™ * <° 

Of-^.HTTPAte^^y,^^ , 

«wrJ«W method, ao ifyuuhawonivBdnrZn™ o^*"****' fa 

fto,', ^ post " * * 3 «^»W9( SSS, 

UNLESS you do Ze of Z tZ ^ ^ * *^ 
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<auth-consTrainl> wfes 



Picky <security-cowstramt> rules for 
<autb'Constraini> sub-elements 

Even ihtiUj^b ii's ^oi iwistrmat in its uanir, tlm is the sub-olfnifiit ili.il 
specifies ulii. 1 1 mi's are ALEOWU1) in access the vreb resource* spfii [fled 
In iJir ■civfb-rpsiiurif -co]l«i:ti«rv> «,nlh-('|<"(in'rit(s). 



The <auth-constraint> sub-element of <security-constrain*> 



■^security-constraint^ 



</web-resource-colIecticn :> 

<ai3t±-constraint> 

<LCDle -name>Ajdm± n</ ro le - name > 
< r o I e -name>Member£/_r olej- name> 

</auth- constraint 

</SGtuiity-coiisti fciittfcs 
</wsb-app> 





i ■ j. Ad" 11 " , 

HP? 




<role-name> rules 



► Wjlriiti an <aNUl-ra5nSlrainl> element, the 
<raJB*name> eiemenl is OPTIONAL.. 

► IT <role-name> elements exist, they tell 
the Container which roles are ALLOWED 

P If an *auttt-CQnstrainf> element exists 
with NO <role-narne;> element, then 
NO USERS ARE ALLOWED. 

► If <roie-nenne> 1 </rol«-nam$> (hen ALL 
users are ALLOWED. 

► Role names are cast-sensftive 



<uuthHOnstraint> rules 



► Within a <secunty-oonstraint> element. 
Ihe <autfi-constramt> element is 
OPTIONAL. 

► If an <au1n-constraini> exists. Ihe 
Container MUST perform autrwnucaiion 
for Ihe assorted URLs. 

► If an <auln-constrainl> does NOT 
exist, the Container MUST allow 
^authenticated access for tnese URLs. 

K For readability, you can add a 

<descrip(ion> inside <aulti-consl!ratnr>. 
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The way <atfth-constramt> works 



Admin, Member, 
and Suest 



Contents or 
<auth-constraint> 



Which roles 
have access 



Member 



-• i i f Xist ; a • 
■'auth -constraint ;■ 

^ r o i -e- name -Admin- /role-name-'- 
<rol-e-name Member - /role -name > 
■i/auth-constraint > 
>: ; 36f u r i r y - c o ii st m i n t > 



Admin 
Member 




<aectirity-cnnatr^int> 
<auth-constraint> 

< r o I c- - 1 j p. -Guea t ■ 7 r ole -natMi > 
</auth--constrairit> 



Guest 



onstrauit- 




* It 



<; securi ty-<rcaa Lr aant > 
■■-.auth-corLSCraint> 

< / euth- constraints 
</5ec\jrity-CGn5tr3int^ ^ ^ 



Everybody 



If there is NO 
<auth-comtraiti> 



Everybody 



Nobody 



<au th-eon s train t/ > 

'. /a«CTird ty -constrain! •■ i t r b aw <™Yw 



" D0 put <n an outn-constratnt>, (hen ONLY the raes exp y 3ccess yQU MUsr 

rates aJ/owetf arW. uy rne way, 
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when <secuhty<Qfistrainr>s collide 



How multiple <securitY-cowstralnt> elements interact 

|nst wiifii you thought you had <sei wity-i , oMsit;tiNt> figured nut, yuu realize thai multiple 
<«turiiy-t iii!Biraini> flemtnti init;lii i rmllii i- l,ook ;ii ihc DD fragment^ below, .mil 
httagme I he difiV-n-ni L'iii)ilim;iiioii» of <nuili-ctnisin»ml> t'onfigurvilmhN thai mi^lil b« U&ed 
Wlia< li,t|i[n*iiK. for example, if 'w <se<:Liriiy-mniiruin1> dtutti OCCtfiS while OttoUUf <uecuriiy- 
fnnsirairil> cxplir itty grouts access,, . to ihc saint n irirHiainrd resouree, fnr ihe same rater? 
Which <sccurity-constraint> wins? The table on the opposite page has all the answers. 



Multiple <security-constraint> elements with the same (or 
partly-matching) URL patterns and <http-method> elements: 



<secajelty^constr*int> 

<weto- r 6 5 ource - co 1 le ct i ran > 
< web- r eaou i c e-n ame ->R&c ipe s 
< /web-resource-name > 

<url-pdL~e.'i :i /Beer/DisplayRecipes/ * 

</url-pattern> 

i i-i r el : /Beer/OpdateHecipeBj" 

</url-pattern> 
■chttp-methwfc POST< / ht tp-met had> 
c/Hefa-resource-collection^ 



tVseciiH Ly-ctmsLid.lr]t> 



Both frf these cseturTty^Cjomtram 
elements jpetify • .■• . j-- ,<,■! 
VBeer/U^fUfes/*' 1 . 



elew*nt» *^ 



security-constraint^ 
web-tesourcB-etillectiari.:* 
<web-resouEce-n.3Kie>Upd.dite 

curl -pa t te r n > / Beer/Update-ftac ipas/+ 

< /url-pattem> 

< u r 1 -pa tter n > /Beer / Upda t eOaers/* 

< /url-pattern-- 

<h t tp-me. t hod >SOST<: / h 1 1 p-me thod> 
■'/w3b-iesource-collect.iGn> 




® 



< / seou r 1 1 y - cc-ris t r a i rit > 



How should the container handle 
authorization when the same resource is used 
by more than one <security-constrair»t>? 
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Pueling <autb-coMtramt> elements 

If t\VYi 0f Hlorr <si'r li| tl\ -r i if isl 1 ;imL> f | t'Tl'l< ' H ' ilJiVt* p;irlUl]|\' uf hllK' "Vt'rlilppHlK 
<wi-U-ri-.niUii'f-L ii|lrrii<in> < Lumii 1.1, Ikh V lv>\\ lliv t imiiiiin i rnnlw -> .h it* 1 < j 
iln' ovcrktppinu rrsmirti-s. A unci LI ri-lVr Id the DL1 Ofl liie prriimis p;w. 



Contents of 



Contents of 



Who has Access 
to MJpdateRecipes' 



<aath-constEainti <auth-corjatraint> 

■cTeiJe-nfini^ Gil es t < / to te-name » * re? 1 f? - n a me ^Admi-ti 
</aut.h-CDnstraint-- </auth-constraint> 



iame> 



Guests and Admins 

1X1 



■canth-const raint> <auth-canstraint> 
2 < role-name Guestx/ role -name;- <:role-name>*'-:/Eole-name> 
</autti-cDnf:traint> </auth-c:cin5t.rainT r > 



Everybody 



% - h-constraint/ ■ 



<auth-conotraint> 

< role -name • Admin-' /role-narae> 
</auth-'Constrai nt> 



Nobody 



4 NO <autft-c on strain f> 
element 



<auth-cQDFtraint > 

< r o 1 e - name '-Admins / re 1 e-name 
</auth-CGnGtraint> 



Everybody 



Rules for interpreting this table: 

[ Whon r-rtrTihinirifl inrtiui^nal rrtlo naniot rtf th& fj-Jfi 

■ ni4\jii uui hum ill iy iiiuiriuuui iuiij iiuiiikjxj, u:i ui IciJv luiki 

names listed will be allowed. 

2 A role name of " * ' combines with anything else to 
allow access to everybody, 

$ An empty <auth-constramt> tag combines with 
anything else to allow access to nobody! In other words. 

4 If one of the <seajrity-constraint> elements has no 
<auth -constraint* element, it combines with anything else 
to allow access lo everybody. 




e«jffy<a«£l 1 -eonsfraint> 
elements afplytorf* ^ 

is Ranted tods union 
aJIroJesfromnodoffjje 

^«tt-constoi„fr. elements. 
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tilt m IrTtft UssfjOfes 

I understand that putti ng in an empty «a uth-constrai nti > etti* 

m en t tells the Container that NOG ODY from any role can access, the 
constrained resource, But I don't Understand WHY you would ever do 
that. What good is a resource that nobody tan access? 

When we said, 'NOBODY' we meant "Nobody from OUTSIDE the 
web app" In other words, a client can't access the constrained resource, 
but another part of the web app can. You might want to use a request 
dispatcher to forward to another part of (he web app, but you don'l ever 
want clients to request thai resource directly. Think of! 00% constrained 
resources as Son of like private methods in a Java class— for internal use 
only. 



0" 

Why does the <a uth -c ons train t > e le merit go in side <s« u ri ty- 
constrai nt > but NOT i ns We the < web -resou rce-col lecti o n > ■ feme rtt? 

A: 

This way, you can specify a single <:aUth-cofi5rrainI> element 
i which could include inlilliple roles'', rind [hen ->petify niuhiplp resource 
collections for which the <auth-constraint> role list applies. For example, 
you might define an <auth-cc<n strains for a Frequent Buyer role, and then 
put <web-resource-collection> elements in for the all the different parts 
of the web app where a Frequent Buyer gets special access. 

Do I actually have to sit there and type in every one of my users 
with their passwords and roles? 

A; 

jTJl If you're using the test memory realm from Tomcat, yes. But 
chances are, in the real world you're using a production server that gives 
you a hook into the LDAP or database where your real user security info is 
stored. 
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Alice's recipe servlet, a story about 
programmatic security.. 

M'u i' kniuft iIilH rm»si i ■! i In- linn- hirativc security is the way to go. Ii's flexible, 
powerful, portable, and robust, A^s web application arrhitccturcs have evolved, 

ill ill] si.-!\l>-ts have become more and more specialized. In the old days, a .tingle 
.scrvlel ^iHtlil In- tit provide business lihjric to siippoil employees and managers. 
Today, these luni timis would probably be split ItitQ m IdUt two distinct servleu. 

Hill, lucky Alice b.i- jilsl inhi-iitcil someone else's " Recipe Sccvlef. Alice baa heard a 

rumour thai ftedjpeS^irlei uses programmatic security to she starts looking through 
I he source code ;md finds, this snippet,,. 



if( peiauesi .isUserlnRole ("Manager-" } i < 



" d ° ^ ^eKerAve page ^ ^ * , rfj ^ 

) case 1 d^t know ab»t 7^ * r«iei . 

// do "the 1/iewRecipe page 



-^harperi your pencil 



What SrSLUIliy itbp llllfti! IlidVe 

happened tiefcre this smppet runs? 
What secunty step is implied by 



Whai part, if any, does the DD 



How (to you think (fits code worts? 



What are the implications? 

Think about what you've learned so far In this chapter, look at the 
small code snippet above, and by to answer the questions 



Whatifflw role of "Manager" 
doesn't exist in your container? 



you are here ► 673 



the isUserlnRatei! method 



Customizing methods: IsUsertoRoleO 



in IhtpSll^UtRt^UOSL, 111 IV (v fttttkicb W ilMm julcd \V\\h 

prog] \i it 1 1 1> a r ii : so : » iriiy : 

t;t*tLWrPriiiL-ipiil(). wh&fl is m.iii i K i !■.<■! I nitij KjHs. We WOIl'l 

cover ii in ihis lH>ok.* 

^ttRemotuLWrO , whk'h r,nt li-e used Id rhei-k ;nit|irn tit-bit inn 
status ir* not cornmooly mod, so we- don't cover it in this boo| 
and llwir's nothing rise yoil need U> knmv about i< t"r*r lite 
cxnm). 

Ul^L>rhiRok'(). uhi> i. II limk ,i< «*..-, . fttf.ti ajl pf -nilluwi/mij 

;ii ijw HTTP method k\d (GET, Ft JST, etc.), yon ran 
aiiilinri/.r acc£9J la ptrttons i>l i> method. This gives you a way 
in fttffftni^r bo*? <t service mrilind IHmves based on the user's 
role It' you're in this service meihod (doGetfl, doPtoirtQ, etc.!, 
then die user made it through the declarative authorization, 
Jmi now you want to do something in the rm'ilmd conditionally, 
based on wheher the uict is in a particular role, 



I just got this servlet from 
Stan in accounting and he's hard- 
cadzd roles that we don't even have. 
{What the %$<3# is a supsrCustsurte^) 
No way am I gonna redefine all the 
roles in my container just so I can 
use Starls stupid servlet.,. 




How it works: 



Before isUserlnRalefj <s called, 'he tiser needs to be 
authenticated If 'he method ts called" on a user that 
has not been authenticated, the Container will always 

The Container fakes the isUserlnRoleQ argument, in 
this example 'Manager", and compares it to the roles 
defined for She user in this request 



it ;» 
II 11 JB USfcfl ia 

returns true. 



mapped 10 ihis rfliS, Ihv Cuniatfifii 




How do you match up roles in 
the DO with roJes in a aervlef? 



* \Vf ilu. Iktumvi. Lijmh hI ittU 
i-alK liter EJJJ liixl... 
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The declarative side of programmatic security 



There's a [food chance thai when a pjogratflBWt 
hard-codes security rote names in a servlet (to use as 
the arguraeni to nUserlttRojkQ), die programmer wri 
JtBI Mit&jg tip ajata mime, lie either clidn'l famv the 
real role names, or he's writhiEr ,i reusable componcuL 
that h tl be used by mure than one company; and those 
Companies aren't likely to have the exact role names 
th<- pcograiiinit'i' used, rinirsej il the i>rogrammei 
really \v;mis to build rutsablt cmnpunnns. bard^coding 
a role name h Tfemble Idea, but we'll suspend 
disbelief for afcttt) 

h lurn* run 1 1 1 ■ - Mi'].i|i>ynieiil l,)«-*cri]Hi>r i\ 
mechanism for mapping hard-coded (which means 

In the servlet 

I I ( tequesl .isUserlnRole ("Manager") ) 

// do the UpdateRecipe page 



I else ( 

// do the Viewfcecipe page 



HMiJf-iip} rota names in a im-fat to tin' "crtliciaJ" 
<s.e<:urity-role> rlerl.ii-.uiiu^ in voin i.n)i!iiiini. 
ImajrjTii'. Iba Example, dun die programmer used 
"ManaKcr" as the isUscrliiRolcQ argtaneoi, but your 
company uses "Admin" as I he <scturily-role>, and 
you don't even have a "Manager'* security rule. So 
en if you can't stop a programmer From hard- 

<■< .<Jii i>j, ;l role tli you At |e:isi have a Tvnrk-su'otitid 

when i he bard-ended role* don't match your wtl ml'- 
names. Because even if you i» have the servlel source 
code, do you really want to change, recompile, atid 
iciest your code jusl to change every instance of 
•Manager" eo 'Admin"? 

In the DD 

<:udb-dpp . . . > 
<servlet> 

^s^curity^role-tef :> 

'< /role -name"-- 
■ role-lini>Jb*j^</ role-link? 
«;/ security- rolelref > 
, ■ , 

</iservjVet> 





<K6c u r 1 ry- r d1 

<T'i Le-nams--Adnu.il 1 i n a me > 

</&ei;uriLy-rc>le> 

<< / web -app > 



^T-r mapping even if the programme " anie m 
* a "real" *s&eurityHTQie> name- 

hard-coded name reafJy DOES ma eft a V ™, ny- ,7 might 

mean somettog comp/ele/y 1^ JiS^f " to an* Wen map 

a te^-corfod -Df rector- to "MarW . So. rfte <S#*Wiy*» 
Lvrt^J bofh inefcftte the same <ro^sme ^ 



.^-rdo da**"** 



<K 
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security exercise 

Assume all security constraints below have the 
same <u?l-palierns and <bL1p-meLhod:> elements. 
Based on the combinations shown decide who 

can tfeeetfy access the constrained resomce. Nobody Guest Member Admin Everyone 



security zop.Dtn=ir.t • 

<auth-con5traint> 

< i olo -name x^ues t< / to 1 e-n aiti6> 
■^/auth-conot rainr .» 

</5ecurifcy-C!Tpri- , at raint> 












-:. z ■= cj r i t y - Can z t ~ a i n t . • 

■iau t h-con st ra l nt / > 

:.-cjnty:ori3tiiinL 












-!ftfrnirity-;..--i:-.r.| .:i nt 

<duth-constraint> 

<tole-name>Ai*nin</rolE-naine> 
</auth-cortstrairit > 

/ sftcLi r i t y- cons tra i nt> 

<security- constraint 

< a u t h- con 5 1 r a int > 

< ro le-riitue >Gue s t< / 1 o 1 e-name> 
''/auth-constrainc^ 

^.security-constraint:- 












-,5&ii:tL , _Y- E<3Ti5Lr=inL ' 

< aiut h-c oris t r a i n t > 

< i o J e -name >Gue.s t <7 r cl e -name > 
</ a«th-r;Qnstraint> 

</ascuri tycon3trflitit> 

oecuxi t y -constraint* 

<auth-constraint> 

< t ttl e-fia(he> • < ft °1 e-ftatne * 
«; / au t h-con s t ra int > 

</se^urity-ccji3traint • 












1 

cauCJi-colsLj'.L ,d in'. 

<rc lc- naimOMcmbcx < / rplc-namo 
</autfc-constraint> 

<; / s« cur i ty-cons t r aint > 

esecm Lty-consi 1 - Assume that NO <aulh- 

constraint:* is deftned 

- / .flsri.li ] fcy-coosti a I 












<r ole- name>Memtie r< / ro le - name> 
/ au th-coii & t l al nt > 

< /socur 1 ty-ccna tra int * 
<3&eutit y --conn-train t > 

<auth-ccmstraJ.nt/> 

«: /Mtur L t y - ci'j n ^ Lrii Lli L 
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OK. so I knuiv all about 
oiirthonisatiom, but I still 
dorrt know how authentication 
happens, or exactly what I have 
to do to make the Conloiner ask 
for a rwne and password... 





Authentication revisited 

For afllfrK Container; miihctuirntion cornea down to this.: ask 
for A [ViCS inane and jittwivnut, thru verifr lli:H 1Ih*V ttMtgff, 

tin first done an ^authenticated tea retta for a 
coam^ned resoun-c, the Cohtain<fr will etuum&ifealh, 
stan ihr authendcfltiofi process. There are four types ol 
Outheniiadinii die Container <;ui providoi and the Mdfl 
difference between them is, "How securely is the name and 
password info transmitted?" 

The FOUR authentication types 

BASIC hcatrcfttiofi transmit? the Instil ItiJbfrmffttafl in 

,111 minded (not ntrnfittrf) form. Thai ini^lil sonm4 ictUTCi but 
ynii probably ahead) know that since ihe encoding scheme 

ibaseti4^ \>i re Lilly well known, BASIC provide* wry weak 
security, 

DIGEST authentication tnmsrniti die login information in ,i 
more secure way. but because die encrypt inn mechanism isn't 
widely used, J 2 FK container* areilt squired in support it. K>r 
more Info on DlCKST audientkntion, i hetik oui die IETF 
RFC 2617 iwwvv.irH.Hip/rfrAno^lT.ixl). 

CLIENT-CERT authentication transmits ihe login 

11,1 Jill Hi III .III i \(n ll!i I'. ■■>■• • t i il III. I, .ill" 1 'ill ill' is. i A 

Certificates (FKCJ). The downside to thtu mechanism is that 
your client* deed to have acerti&ate before they can login to 



| K t | I 1 Ti |.T I.A | | a i I n M 



it} CLJIiNT-CLRI lunJu'iitii inion is user] mainly in buaintrss iu 



The tbri-r types time BASIC, IHS fFST. ;md C LIEN-CERT 
all use the browser's standard pop-up Ibrni lor inputting the 
ftatae mid password. But the fourth type. Ft) lift J, is d liferent. 

FORM authentication; lets you create your own Cuitoni loffiu 
form rait of anything than legal HTML. But... or all fbur 
type*, tin- (brni'based info is ufanstnitted in ihr lean secure 
way. The iiser&atnfl ftad p&isword ai* seni hatk in the HTTP 
request, with m encryption. 



you are here * 677 



declarative authentication 



implementing Authentication 

Tim « thi' uxap\t pait— rimply d«lare the gM*tbentusattan 
scheme in tlw Dll Tin 1 in-iin DD ekmaal Ibt 
amhentkaiuui is <liigin-c(mfig> 



Four <login-config> exampl 

i wsh-app. . .> 

<lcgin-config> 

■taut h-me t hod >BAS IC< I a ut h-me t h od> 
</log:n-c{inlig> 

</«eb-acp> 

— or — 

.-<[.(: . . . .• 

<login-config> 

<aut h-me t h od - =-D IGEST / a u t h -me t h ed> 
</Iogin-conJlg> 

c/WBfa 3f*l 

<UO£i-*pp. . .> 

<logln-c<jnfiq > 

<auth-niethod>CLIEllT-CERr- /ai:: li-metheni> 
</login-co[illcf> 



|( your fisntimcr u.pyorts DIGEST, ti 
will Wlc ALL ti.e detail* 



• rr 



or 



«:login-config> 

<aLLth-met.hod>FORM<: / auth-[uothod,> ^ 

< f orm-1 og tn-canflg> 

< f oxru-1 OLf i n -page > / 1 tty in Page . html < / fox w- 1 c?g in-pag e> 
<f orm -error -page:-/ log inErr or. htnl<: /fonn-er rax -pa ge> 
<■ i f orm- 1 ogin-c-a nfig > 
< /login -config> 

J ^ ---lIi -rw i 



FORM 11 ti*t l*«t Corrflitittd 

te implement, *«'ll look ji rfc i« 
detail <m the ne*t pa^t 



Except for FORM, once you've declared 
the <login-config> element in die DD, 
implementing AwtfcenffcafSoii is done! 
(Assuming you Ve already configured usefname/ 
password/role info into your Server.) 
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FortK'Pased Authentication 



Although th*fe*S more to implementing it than with the nikei lorim of uLithrritLoaikm, 
IT>RM-I>:im'hJ isn't kid. FiFsti you create your own custom HTML form for rlie u.Hrr login 
[although this can certainly be generated hy &JSP), Thru you create a custom HTML error 
page fix ihr Contamer to me when the user makes a lugin error. Fin;illy, yow fie the two 
forms together in the DD, using the <iogin-conlig> element. Note: il" you're using Form-based 
authentication, be sure to lurji on SSL or session tracking, or your Container might nol 
recognize the login form when if* returned! 



What YOU do: 

© Declare ^login-config> in the DD 
© Create an HTML login form 
® Create an HTML error form 



0 In the DD. 



co mmuriicaf 

*»th the container; 

■Lsecurfty check 
-Lusernaitie 
■J Password 



clogin4ebn%> 

<:aut h -met hod > PORH< / aut h-me t hod> 
<f otm- 1 o<ji n-conf ig > 

< f orm-login-pag^^4«jinPag» . htal- / f orm-login-pti'ge > 
■^form-error - Frf!^ ■■' / log inError , html'-. / £ orm -e r r or-page^ 
< / f o r m- 1 oq in ~jmrdiq'> 
</loejifl-conficp 



(D 





(D 



Inside the logfnPage.htnJl... 

Please loqin daddy-a 

<form met h od= "POST" act Jn-" j_security_check" 
t input type="text" n^e- r ]_usernajne 

*, input type^paE-wo^" nana**" j_password" 

valoe-"Enter*;- 

Th* Container ft^itt, {bli -the 
HTTP re^uftt will store the 

Inside the loginError.html... ra^wwd fat jjau^d 



TV Cortaine*- re«^we* tHit 

the ftTTTP 



■ input. type-*5Ubmi; 
</fbra» 



ibini, # val' 



■■ litm.l ><bcidy> 

Sorry ducte, wrong password 
</body><7html> 



Don't 



JJJJJJJJJJJJJJ .*f -> + ri-t+>-L LI L L 



Vou need (o Know evefyth/ng 
or) tfjis paoe for fhe exam/ 
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authentication types 

Summary of Authentication types 

This tabfe autttT&arkes kt*y attributes of th-e timr authentitatiuTi types, 

"Sjii'i " rrli-M Hi wkrtlii'i llils lyjjc i »( Lilllliril ric;ilii hi mm iunUMll is 

defined in iln* HTITsptx- em IheJjSEE sr.)*-*;. (Hint: voy*U need to 
rrmcirilirr lliis tahJr when vim laki* ihr exam.) 



Type Spec Data integrity 



Comments 



BASIC HTTP 

DIGEST HTTP 

FORM J2EE 

CLIENT- J2EE 
CERT 



BaseG4-weak 
Stronger - but not SSL 
Very weak, no encryption 
Strong - public key. <PKC) 



HTTP standard, all browsers support it 
Optional for HTTP and J2EE containers 
Allows a custom !og;n screen 
Strong, but users must have certificates 



(icstiPtis 



0 ; 

T^, What does data integrity 
have t o d o with flu t hentk at io n ? 

A: 

£\ Whervycu re aulhenticating a 
user, she's sen-ding you her username 
and password. Data integrity and 
confidentiality reteri to the degree 
to which an eavesdropper can steal 
□r tamper with this Information. In 

a [rinrri^rrt^ yye/|3 tslksbOSjt HOW 

lo implement data integrity and 
confidentiality during login, 

Data integrity means that The da I a 
that arrive; ii the- tame as (he data 
that was sent. In other words, nobody 
tampered with it along the way. Data 
confidentiality means that nobody 
else can seethe data along the way. 
Most of the time, though we treat 
data integrity and confidentiality as a 
single goal — things you do to protect 
data during transmission. 



pen your 



f I- n ine n:is-5ir>3 pieces for this FORM-based 
authentication app. Tfiis is just to help you memorize the 
authentication-related pieces of Itie DDand the HTML form. 
(The answers are or the previous page.) 



DD 

<login-config> 
taut It-met hod; 



</auth-method> 



< f nrm- 1 ocri n -co nflrr -■ 

< 



< f-:rrn-crror-FCigc >/lt>ginErroi:.htrRl* ft cm-crmr-pagcv 
< / £ □ cm- 1 og 1 n-config> 
</iogin-config> 

HTML 



Please login daddy-o 

<t':inn method-"F05T"* actinn-jj 



<rinput tyrje="text" najn&= 

<input type^password" name =" r j_pasE word" > 

<input type-"FubmU" v^lue-"Enter"> 
■i/fonsi? 
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She doesn t know about J2EE's 
"protected transport layer connection" 

Dirn't Punic. Vdli i h.iVi- V i il-,liirn Infill <;iki- unci iecUre t< tint. 

r j.>. .-..:u -- »-» Mt* -.--"•>-, -.1 

ijij^iu n,i.i,i mij] tiwfi, »j ;i/u i.,iit Mil" ii 111 1-niii" um i.i wmii 

bQ pTQtCCl an nnlin*- shrippi-r's cmtil card nuinlirr- using y<iur J2EE- 

complmn! Comaiiu-rs data integrity and vnnlidcniinliiv feature* 
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secure transport 



Securing data In transit: HTTPS to the rescue 

UTi.-n you w\\ a J2EE Container that yon want 10 impk-nuim data 
coiilidentialit) and/or Integrity, th? JL'Kh sp« gaar*nt*efl Mint the data to be 
tnmtmitted will travel mvrr a "proleclvd transport layer iui(inp<?ti«>ii '. [n 

riiln-r words, CuuuiiitrTii arc hue rrqntrr/1 to use iiny uprdlif protocol m handle 
secure I nmumksions, bui in practice they pearly all use HTTPS over SSL. 



HTTP request — not secured 

HTTP over TCP 




POST /CheckOvr^tfi 

[rtqucst Keepers] 




web server 




POST /advJsor/Selecifiee.rTsste.do HTTP/ 1.1 
... [request headers here] 

treditCardNu m = 5 55 1212 343&e>tpDate = 0505 



The Bad Eavesdropper gets a 
copy of the HTTP request that 
contains Ihe clients credit card 
info Tt» data isn't prelected , so 
it comes over in the body ot Che 
POST in a nice readable form. 
The Eavesdropper is flappy 



A secured HTTPS over SSL request 




HTTP 5 aver SSL over TCP 

POST /ChcrkOut.jsp 




Tim Bad EavdiLiioppyi yuli <t uupy 
of the HTTP request thai contains 
the client's < 



But because it was sent with 
exlra-slrengtti HTTPS over SSL, he 
CANNOT read (he informafSon 'i 
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"mink about what's been covered in (his chapter, If your web application is 
going to be fast, efficient and secure, you've got some questions to answer 



Do you need for every request and {,hwe afe no answers for ,hls ore; irs f0f *** 10 fiflur * oul) 

response to be secure? tl not, which 
parts of your app need protected 

transmissions? 



What do you (hank data confidentiality 
means? 



What do you think data mtegrity means? 

If my myjd apply Efansmissinn snnjrTty 
measures to only some requests and 
responses, how would you want to tell the 
Container wtotfi requests and responses? 



Can you 1hink o( any other DD etements 
that wort on the same level of granularity 
that you want lor declaring protected 
transmissions? 
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How to implement data confidentiality and 
integrity sparingly and declaratively 

Once ftgatii, we turn m ilie DO. In Lji-i. we'll unf cmr nld Crimd <*«:urity- 
cm*triun1> l>n Isolh confidentiaMty and inLcypriiy by adding ;ni clrnmn called 
<«scr-data-c™strain1>. Ami tv]i<-u you lliink aboul it, it maJtci> sense — il" you're 
drinking aboiu authorization for a rBscnirct, you're proliably s^oing to consider 
whether you vfVttt ihe cliUii transmitted sit urelv. 
<".Veb ipp . . . » 

< seen r i t y- con s t rai nt > 

<web-resource-collection> 

<Tjrl-patceEn>/Beer/U^HiateRecipes/*</url"pattern> 
<bt tp-method>POST<. /htxp-mechod^' 
< /web-resmirne-ccl J enf ion"- 



< aut h-cons 1 1 ai n t > 

<rcijB-n3rae>Meiiiber- /role 
</autb-con£Ltdint> 



-name^ 



ita -constia int> 
<trariaport-guarantee>C0NFIDENTIAI^c/tTanaport-guai:3nt&e> 



</security- constraints 
'w&b-app> 




Legal values for <transport-guarantee> 



Put (hese three sub-element 
together to read: 

Only Members can make POST 
requests to resources found in 

i.... ii i_*_n,_j.: j l 

my ujuusfiwrewpes uii t&Luy, 
and make sure the transmission 
is secure. 



NONE 

This is !ne ctefault. and it means (here's no data protection. 
INTEGRAL 

"i s data m ist not be changed along the way 
CONFIDENTIAL 

The data must not be seen by anybody along the way. 

NOTF alttough not guaranteed by ihe spec ^ practice virtually every 
Container uses SSL far guaranteed iransport. which means (hat bath 
INTEGRAL and CONFIDENTIAL do die same ihina— either one giwes you 
both confsdeniialily and integrity. Since you can have only one <usei-dala- 
con strains per <security-constraint>, some people recommend you use 
CONFIDENTIAL but again, it wilt probably never mailer in | 
yen move to a new (and unusual) Container that doesn't use SSL 
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Wort., how do you guarantee 
that the requ&st data is 
nuafid'flntioP The ■CflfiTairtft/ n doesn't 
even knwi it's supposed to protect -the 
transmission until AFTER the client 
makes the request... 




Protecting the request data 

Remember thai in the DD, ilu- <ftcutiiy<pji«rain£> 
nboiil what happens nflrr the request. In other words, 
l lie client has already made the request when the 
Container starts looking at the <securily-eonstraint> 

i lemeatt t<> decide fciow to rwtpomt Thtxtqmt iaUt lm 
already tutu Stfit (tear tttr uiir. How Cat) j(OU pussilily 
n-niinrl i li c browser that. "Oh. I»\ the waf, if the user 
happens to request tktl resource, switch to secure 
sockets (SSL) brjarr sending the request/' 

What can ytiu do? 

You already know IroW to four tile cheDt l<i get a 
login screen by defmiug a can$trarncd resource in 
tin- DD 3 the Container nutoiMtkali) trigger ihr 
;wnln'nlicatlon process when ;m unatithenlicaU'd user 
mnkrs the rcqucuL 

So now we have t< > li^tire mil hmv Mi prnicel the data 
i imiiiiii in from a request... mn land lometimes 
fSpfriall)''\ when the client has not yet logged in. 

We might want lu protect their lupin dalal 

Turn thf page to set- how it n\\ works... 
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wftftout <transport-guarantee> 



Unauthorized client requests a constrained resource 
that has NO transport guarantee 



Client 
which 
DD 



requests /fiuyStuB.jsp. 
has been configured in the 
a <security-constraint> 



HTTP over TCP 



The Container checks the <secunty. 
constraint and finds tha! /BuyStulf is 
a constrained resource which means 
the user MUST be auttteniicated.TTra 
Container finds trial iriere is NO transport 
guarantee for 1fi is request. 



.- u ss r -cb* ta-cc? n 5 1 r 4 i n t > 
' t ran5port-guarantee> 
NONE 

^/transport-guarantee > 





tontufner 



"NOrVE" « ihe default, « 
wcb.xml it is wkjt. yo» yt eve* 
if yeu do NOT jfetify 
a DP element for 



The Container sends a 401 response to 
rtie client, thai tells ihe t>rowser to get login 
information from the user. 




container 




The browser makes the same request again, 
but this time with the user's Sogrn information in 



the header 




POST/EuyStuff jsp 
/iUThoriiotton: 
Basic: xBw3,.- 



/ikes^ TKe t\\t*l'% l*Ji» i*fo*i*jtiwi was 
NOT sent se^ely The diet's merhj-^ 
and paiiwerd *it*-e not pretexted ' 



(?) 




The Container aufliersticates the clrent (checks that usemame and password 
match the user data configured in the server) Thei the Coma ner aulhciizes 
the request to make sure that this user is in a role that's allowed lo get the 
constrained resource. Everything checks out, so ihe response is senl 



«h,tml> 

£nte.n Credit Canif^S 

(input type=TexT name=ccNum> 

• /htmli 



container 
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Unauthorized client requests a constrained resource 
that has a CONFIDENTIALITY transport guarantee 



Client requests ffluyStuffjsp. a 
constrained resource that also 
has a transport guarantee 



HTTP over TOP 



The Container sees thai ttiis 
constrained resource has a transport 
guarantee The Container sees that itie 
request did NOT come in securely. 



container 



:uaer-dita-L 
<= t ranepart -gna ra n t p.e > 
CONFIDENTIAL 

*'/ 1 ra n sport- guaran t e e > 






The Container sends a 301 response lo the client, thai 
tells the browser to redirect trie request using a secure 



transport 



301 Retire* r 
Location; HTTF5:/A- 



cofitoiner 




The browser makes the same resource request 
again, but this lime, over a secure connection. 
In other words, ttie resource stays the same, 
but the protocol is now HTTPS. 




container 



& Wo* trie Container sees thai the resource is 

^ constrained, and Itiat this user has not authenticated. 

So now Hie Container starts the authentica'jor 
ft, process by sending a "401" to ttie browser... 




The browser makes (he same request again, (yes, for the THIRD 
time) but this time the request has the user's login data in the 
header AND the request comes over usff>n a secure connection. 
So this lime the client s login data is transmitted securely! 




if 



container 



you are fiere » 6fi7 



protecting ■ ctefa 



To m.k. sure the uWs login info Is 

«guM^| a coined ^ U ™J°^™ ^ nnecton . nerf to P y < 3 <*flr*p»*< 
dafe comes bad. to server over a secure » necwj £ ^ m ^ ^ 

guarantee* 0* EVERY consumed resource that could trigger m 

-„ , »„o ™™ os f for rne consfnafned resource, tof BEFORE 

not suppose to even MAKE this ^™ ™ m £ ronto r„er THEN says, "Oh. I see 

you're on a *«n« cort^ W I * ^ ^ sends bac , 
orowser puts toe togr/i form for toe user, gers 
THIRD request ever a secure connecfjort. 




0* 

] don't understand why the Container 
sends back a REDIRECT (301] to the client 
whe n the req uest to me * i n without a s*c u re 
connection. Doesn't it just redirect back to 
the same original request? 




Norm a| !y yO U T hi n k Of a redirect as 



rn*?!!n!ncj "Hey browser, go to a d!fferpntUKl_ 

instead? The redirect is invisible lo Hie diem, 
remember; the client's browser automatically 
makes the new request on the URL specified in 
the redirect {301 ) header that comes from the 
serve r. 

But with transport security, it's a little different. 
Instead of telling the client browser, "Redirect 
to a different resource", the Container says, 'Re- 
direct to the same resource, but with a different 
protocol— use HTTP5 instead of HTTP 



Q" Sd, IsHTTPS otfer SSL just built in to 
the Container somehow? 

A: 

XV* 1(1 guaranteed by the spec, but it's 
exlrsmely likely tiirfl your Container is usinct 
HTTPS over SSL (secure sockets). But ft won't 
necessarily avtofnaticiVou probably have 
to configure SSLin your Container, and more 
imijui tanlly — yuu need <i tei liikdle' 

You'll have to check your Container's docu- 
mentation, but chances are, your Container 
can generate a certificate that you can use for 
testing., but tor production, you'll need to get a 
Public Key certification from an "official" source 
luch as VeriSign. 

(Certificates and security protocols like HTTP 5 
and SSL are way outside the scope of the e^am, 
by the way. You're expected to know only whai 
you have to do in the DD, arid why You're not 
expected to be the sys-admin and network 
security master.) 
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web app security 



irpen your pencil 



Configure tne security aspects of a web application by filling in Ihe three 
blocks tn the DD The web application must have the following behavior: 

You want anyone to be able to do a GET on Ihe resources within, the 
Beer/UpdateRecipes. directory (including any subdirectories}. bulyou want 
ONLY those with (he security ro°e of "Admin ' to be able to do a POST on 
resources within that directory Also you want Ihe data to be protected so 
thai nobody can eavesdrop 

fweb-app. . . > 

<security-constraint> 



</secur ity-constraint > 



</web-app> 
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security exercise 




Fill 'm.I following lablc ny wril hp n l he -plf-yanl DD 
elements. Voj'II see Die answers when you lurn Ihe page 
(aid don'l even LOOK at the opposite pagel). 



Security goal What you'd put in the DD 



You wart the Container So do BA&tC 
authentication automatically 




You want to use your own cusiom form 
page, named login Page.hlml" (and 
deployed tflrectJy at the real of the web 
app) and you want "logmErnor.html" to 
be displayed if the client cannot be 
authenticated 




You want to constrain everything with a '.do" 
extension so thai all clients can do a GET. 
but only Members can do a POST. 

{You do NOT need to include the DD 
Information.) 




You want to constrain everything within Ihe 
footer directory so mat only those with 
a security role of Admin can invoke ANY 
HTTP methods on those resources. 

(You do WOT need to >rtctude the DD 
elements needed to ccnfjgire login 
information.) 





690 chapter 12 



web app security 



irpen ywr pencil 



ANSWERS 

You want evefyone 10 be able to do a GET on the resources within the 
Befr f "' , Jpdali:Ri>c-'pes directory (including any suM lactones}, bui you wani 
ONLY (hose with the security role of "Admin" to be able to do a POST on 
resources Within that directory. Also, y<HJ want lUe data to be protected- so 
thai nobody can eavesdrop. 



<--«ieb-app. . . .- 



<web- cesource-callEction> 

< web- r e s our ce - namoRe cipes< / web - r e s our cc - n ama> 

vr — — 

<tirl-pattern>/Beer/UpdateRecipes/*</url-pattem> 



< / web- resouEce^allectioii> 



<auth- cons train t> 

<rol e -pame>Adml n< / ro le - name > 
< /au th - con s tra i n t> 



* -f tfe WKL patios 

ih e HTTP r 



<uset data eenstiaint> 

<tr anspor t-guaran tee>CONFIDENT IAL< / 1 rans po ut-guajranteaJ> 



< /ia gar-data - cons traints 



< / s ecu r i t y-con a tr a int > 



</web-app> 



Y> ta,ld W e «id (NT&jML fe« *J 

thrt * net J^dh^td fcy^ lpet ) 
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pen your pencil 



ANSWERS 



Security goal 



What you'd put in the DD 



You want the Container lo tfo BASJC 
authentication automatically. 



<clogin-config> 

-■' an th -met h o d>BAS IC<7 autft-ine t hod:> 
c/i ogin-confici > 



You wan! to use your own custom form 
page, named " loginPage.html" {and 
deployed directly at the root ol ine web 
app). and you wan? "loginEtrorhlnil" to 
be displayed if ttie client cannot be 
authenticated 



< 1 oqi a- cronfigj- 

out h-ene t h od>FOBM<; /am h-ne t h otf> 
<f arm -1 ogi n- co n fig > 

•;foim-login-page>/loginPage.htnilT / form-logifi-p.ige> 
tform-error-pago/loginErrDr.htnLU / form-error -page > 
■c/f ortn-lug Lti-ecmflcp 
-c/login-config> 



You want to constrain everything with a " do' 
extension so that all clients can do a GET 
but only Members can do a POST. 

t«*trai*ed rtsn.rt< M « 
patt^ pl« HTTP Method)- 
a „a the *ai.tii-wi<nvstraiht> 

that d<f »* the *tw*H e 
£*.*«*« th« 



c3«curitY - const ra int ? 

<web- resource-collection 

<web -resource-name ;>C!ool Things /web- reEource- name > 

<url-pattern ■* .do</nrl-patCern^ 

<h.ttp-method>POST<:/http-itietho<l^ 
< / web- r e s cures -col le c t i on > 



< d u th-con s t r aint > 

c La-name. Member -/rale-niisio 
■t/auth-conptrslnt* 

^/.^iiu v\ c v - "!" 1 "^ trs in t^ 



We uied the 

patterm that akay* 
start* with 3»i 
asterisk £*) 



You want to constrain ©verytiing within the 
fo&'bar directory So that only those ttitb a 
security role of Admin can Invoke any HTTP 
methods on (hose resources. 



'.Veb-app , 

* <securi ty-corvstrai nt > 
■■. web-r e s oiirce - co 



c:wej3-rBsourcF=-namf 



wen - r e sou r c-e -name > 



■=u r 1 -pat te rn > / f oo /bac/ * < / 'j rl -pat t e rn > 
</web-re30urce-collection> 4v s. rf . , , 

\ We |#b «<Wf- 
<auth-con3t:rain.t:> h.eth»d> so that 

<XoXe-oaW Admin-- /cole-name* UTTP Method* 
</aut h- const raint> are to*striined V « 

</»&curity-cciDBtraInt> 3««ssible onty W those Iff 



the ftd** 1 role 



692 chapter^ 



w&b spp security 




ANSWERS 



Nobody Guest Member Admin Everyone 



>.■;•<: j r.i t y-vanSLrai &t ' 

<auth-ccmsfcrai.nt> 

<r ol e- n ame >G Ue s t < / r o 1 e-namfi-> 
</auth-canstraint> 

(./3B-urity-constraLnt> 




X 








(?) 

i'aLiLh-coiis!. ra lj\L/ > 












<s ec j t i t y—: oris train- > 

<auth-constraint > 

< r Die- q air,e >Adnsl n<: / r a le -name > 
</auth-const raint > 

<^se-LM:Lty- i:DH5txaint.- 

^security ■ >=onatrainL> 

<auth- constraint 

< r ol e- fiiisit* :>G ue a t < / 10 le -name > 
</auth-CQnetraint> 

</SHCijrit.y-i-c-ii3traint> 




X 




X 




<aut.h-cc.r15t raint > 

< roie-name>i3uest<: / role-namo 
</auth-c:onstrl.ant> 

< ^aBcurity-ctinsLtELLiiL - 

- 3 6.-u c - 1 v com trs : r.i. 

< a ut h- c onst ra in t > 

< r ol e - name > * < /x ole -name > 
</a«th-con,straint> 

< /security- constraints 










X 


<3iich — constraint > 

<roie-name>Member</ role-name> 
< / auth-canstrair.it> 

< /aecur it y-canst raint > 

•.---..rit V -r-r.3trair,t • Assume thai NO 
. . ■ <: — — - <!aijJli-cofi5trainl> 13 

.■ security constraint - defined 










x 


Jgj ■Cs'ecttcity -:on-L : =ir.L 

< a nth- cons t r ai nt > 

< role-name >MeTnber</r^le-name> 
< /auth-c oris t raint > 
<■ /seciiri ty-civtisr ra int > 

< security- ccnat r. aint> 

<auth-const raint /> 

< / ae en r ity-cofiat raint >■ 


X 
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mock exam 




1 layer? (Choose nil thai apply.) 



Which Security mechanisms always operate independently of the transport 



□ A. MiilwjriB 



O \i. data integrity 
Q authentication 
□ I J, nvniiuYiiuality 



Oivjt?n depfctymem descriptor with thJr*- Viilkl <secur i ty - con s tr ain t> 
clnnrntf., nil Cotjstniiiiinp well resource A, whose respective 
<auth- constraint ^lib-elements arc: 

<auth - con s train t> 

<role -nama>Bob< /red e -name> 
</auth- constraint 
<auth-constraint/> 
<autb - constrain t> 

<rolc -naae>Ali ce< / role -name? 
< / au th - eons tr a in t> 




□ C. only Bob 
Q l>. only Alice 

□ E. ■>!![> Bob arid Alice 

□ K miyuiif Imi B i- Alia- 
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w&b app security 



Wliult jict'iviiirs w.mkl he addressed vht it]2KE I A rimtMin-rx data integrity 
mechanism? (Choose all thai apply, i 

□ V Verifying thai * specific user N allowed aters-i to ;■ speciiu H1ML page 

G B. Ensuring ihal son eave chopper cairrl n-:id an HTTP BltAsagc being teat 
iVum the client l«» the ebntanhef 

□ (I Verifying thai n iHic-tU making n request Fur 8 t or wr<d net! J SP bse t hi- 

proper pole iH'ilcriliaU tO access ihrJSR- 

G I'.). Ensuring thiii a backet can*l altcf the animus of an HTTl* message 
while il ti it) transit From thr container to a client. 



4Wliirh are required fields in tin- lo^in form when using Form Based 
Authentication? (Choose all thnr apply.; 

□ A pw 

□ It. id 

G c j_j>w 

□ I). }_ld 

G E. password 
G ]■'. j^password 



SH'hieh authentication types require a specific type of HTML action? (Choose 
fdl that apply i 

□ A HTTP flask Authentication 

□ H fbrtii Baied Autheflti«uiotl 

□ C, H I I P Di^i si Authentication 

□ n HTTPS Chan /udModan 
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mock -'. 



Which Micurm mi^lujiisnis can hi- iinfili'inr'inrd In nsim* -i nieilioil in rhr 
O HttpServletEequest snkTNH H^ <'|im.*r nil thai applet) 

U A- ."I I I I 1 n IaiEhjiI 

Q B. tliiTii irm.'iiffiu 

□ C authemi&idoti 

□ 11 rojirtflrtitiiilily 



UliHi HttpS&rvletRequest iiu'iIhk! is mnsi closely <is$iiriuteri With Ibc IMBB 
..I Mi.- <security-rale-ref>clcnirni:' 

□ B. getco&kies 

□ l . isUserlnBole 

Q I). getUser principal 

-1 I.. isRcquostodSessionlDVallti 



Which deployment dtscripttu' elements fan contain a < transport -guar antee> 
stih-rluiin-m? f'Chonsu' nil that apply ) 

□ A. <auth- constraint 

□ H. <security-role-ieef> 
Lt C, <forra-login-config> 

Q l\ <usar -da ta- cons train t> 



Which authentication mechanism h recommended to be used osbj if cookie) nr 
SSL session trackinc is in place? 

□ A. 1-il'H' AuihnmV:iiL.in 

□ B, E*m Based Audientk-niuLi 

□ I* INTIM:ii<-iiiAiiiliriilK^ 
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— ; kjrtfefc spv 11 1 

Which security inreriDnLiniit always Operate independently tit the transport 
layer? (Choose all thai apjjh 

HA. iimhori^aiiou ^Oftion f\ is derrtct operate* 

U C. auiltentxaUon d ff e£ t ^iriwrt U^r ba«d *n ^ 



Givtn ;i de^loytnetil dtscriptar With Hirer valii] ^security- constraint (ser^et 5 ?*^ 
elements, ;iJ constraining wrh rcsnurcr A. whose respective 
<auth- cons train t> suh-Hcmcnlg arc: 



<auth - cons train t> 

<r ole -naiws>BQb</r ol g -name > 



<auth- constraints 
<auth - constrain t> 

<r ale -naira>Ali ra< / role -name> 
</ au th- constrain t> 



VV ho ~c?i n UliCSS resource A? p 

5/ , -fahoK A >* torrect The e*.ri*r« ©* an 
M A noon,: J ? K <autWeM^ainb df»ent ov<«ndo 

□ B. anyone all afcW ^th-coMbr*""^ elewthfe wt 

□ a (Mllv Ba |, refer tc tot mourte, T ««U«) 

□ 1 1. only Alice 

□ & only Biili<mrl Alice 

□ I" .iiivemi' bul fr,l> ,n- Alice 
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moctt answers 



Which ..c-iiviii^ he ;ukfr^i vh tfJ^EE 1.-1 roniiimri-'a to i.nr^iiv 

3 nirc^mism" [GbSici^ ttE that Sfsptyj 

^ V \ I'j iJyinn iIi-j! a specific hmt is ftll-owed access U» a wcctfic ti 1 ML pagp, 
O E. En.-iUriiig lh:tl ^n^drni^jrr i ,ni't i i*;irl ari HTTP inrssaiic Ui-injj w-ni -Opti«* B describes 
IV mii the ( lirni tu the container. confidentiality 

□ i . Yrrhvinn than it client making a request for ft ceniitr^fiBidJ.SP has tin- 
p*oper i»k esf*dcHtiak to aecees 1 1 n- JSP 

£] D. Ensuriiig (Iml a hacker can i alter the eoaieaU of an HTTP ine**a.gr 

while il is in iran-sil ('mm ihc container In a dieni. -Optntn D » Correct- Tbi* 

would fcff«ialhr be atc «>f_l« W 
thro^'lfce use of rrTTPS. 



Which are required fields in tin- bin'n form wlun usrim Ru m Based (Servlet s^eC 

Aiahcatfcation? (Choose all thai apply.) 

□ A. pw 

□ it, id 

G J_J3W 

□ U. j_id 

□ E PWN w p h £orrfti ^ ^ be 
U 1-. j ^password m a { 1( ,[ d tJ ]| e j ^j-anworj. |i> addition, t>>e 

user's name wust be djered ^_usernawe 



I ^. I J 

Which anthem :iti<in typ«s require a tpa-ilu- type «>( HTML an«jn. J ;c:h«»»»i' (£er*' e ^ *?* £ ' 
;'ill rliiir apply] 

U V HTTP Uasfe Authentication , r r la 

x/T „ , -Option 0 is correct- r«r Ton*, wiCy 

O P Rwffl Ba*ed Authentication Jkenbtabon b> iwrlt, tb« actio* °f the 

□ C. HTTP Di^si Mthentieation W be j^tfurn^itaik- 

□ n. HTOS i 
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W'li it'll security tm - c hiniisnis t ;in lie implemented by iisini; it method in the 
HttpServLetfieqnest in inflict^ •(.'IvMisr .ill ili.K «p|ily.i 

jQ . V .in 1 1 |i ?i i r,\\ m ■! | M>n f\ <i txuvct^, The isWs«» (nRoic i*c{.hotl tan 

□ B. dam ihwgntv b f 3 d W-*b"IIV. j* M» * 
~? clients, role is authorized xt> aeeew a yvtn resource 

SI C autltentiaitiafl i 

□ n iu - ft. "S^fe C * £ ~ r ? t „ Tl, , e V«*»«kt(*eY -rthod ta* 



Which HttpServletReqxiest nn'ilir.Kl it Kom\ dnnch assudiiird with the us* CSev^^t t?* 6 " 
oC (he <security-role-ref> ctctnent? 
G A, getHeader 

G U. getCOOkies . 

n „ dwpta-^ io-ayrole hardtoded *3 sS ™ 

□ 1). getUwrPrincipal ^ rales d«b«d i, ti« de^-e^ ftT^i. 

□ K. isReque stedSos sionlDValid tfUserkMe « * $ tte 



Which deployment de# rip leroenta can conti 

wb-elemtuit? (Choose all thai apply) 

G ,\. <auth - const rairit> 

□ |i. <security-role-ref> 

U 1 .. < form- 1 ogi n-config> 

irf" 1 J. <usar-diti-Gonstriint> 



id a < transport -guar an taa> [f^^t s^et 



web resource £ojl«&on should be transited winj A .*e£ka™si* 

with ai ££L 



Which authentication Btei Iniihmu i* recommended to be ttSttd only il' COokiCfl or (Jtr^tet V^t&— 
■SSL 5cssii)n tracking is in place? 

□ A. H'ni'BrwirAuthcntiicatir.fi 

H. K™ M Authuiticatiun -OfW B - Urrtft For., based j# ^ f 



□ G. HTTPni^LAiMh.tui^on — £^ 

G I). HTTI* Clkiii AmlicnrioniMi 
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13 filters and wrappers 

The Power of Filters 



bo not even THINK about 
tryrng to talk to the maste-" 
without going thniugh rtlfc first. 
I control whot g&es to the muster, 
ond I control whot comes from 
tke master. . 




Filters let you intercept the request. And if you can intercept the 

p$qii&£t, you can ale,o control the response And hesl of ail. the Eervlet remains 

clueless It never knows that someone stepped in between the client request 



and the Container s invocation of the s&rvlel's serviceO meltiod What does that 
mean to you? More vacations. Because the Bme you would have spent rewriting 




ewry servlet In your app? No problem Want to manipulate the output from every 
servfei in your app? No problem. And you don't even have to touch the servlel 
code. Filters may be the most powerful web app development tool you have. 



U 3 rtew chapter 
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official Sun exam objectives 



Filters 



Coverage Notes: 



3.3 De scribe the Web C onta in er reque st prc-ce ssi n g 
model; write and configure a filter create a 
request or response wrapper; and given a design 
problem, describe how to appiy a filter or wrapper. 



This objft tivf ii fovmd iomfjUtfh in this 
rlmjitn. 



11.1 



11.2 



Given a scenario description with a list of issues, 
select a pattern thai would solve the issues. The 
list of patterns you must know are: Intercepting 
Filter. Model-View-Controller, Front Controller. 
Service Locator, Business Delegate, end Transfer 



Match design patterns with statements describing 
potential benefits that accrue from the use of 
the pattern, for any of the following patterns; 
Intercepting Filter, Model-View -Controller, 
Service Locator, Business Delegate, and Transfer 
Object. 



Filters, which are coivmi in this fhiipter, art 
tm nampU uf [imaguu tfiisl tlit Iiitfraptiiig 

Fi/tii ftrlttrtU. Mr ifati't nil fi jiflitf>»- ipi ■> Ilk 

a;)" until Mm /Wtw«s r /«!/*«, hut it's iii if as 

rltttptn H'hnr vm Wtudh w it dr-sigtt lh(ti 
imtmtrtlla !/tr htrrrrjitirig Filtrr fmltnu. 
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Enhancing the entire web application 

SomfliiiK* you need to ttdtttaee your system in ways thai span many 
difierail use eases or requests Fur example, you uiiglti wanl to keep track 
of your system 1 ! response itm*"^, across jII of lis dilVnvni user interactions. 



I got good news and bad 
news today. The good news is 
that the new "Add your favorite recipe" 
feature on the Beer site is very popular! 
The bad news is that the boss wants us 
to keep track of all the users who 
access these servfets... 
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request And response? 



How about some kind of "filter"? 

Filter) are Java component! — very similar to sen-lew- thai ynu can use 
to mteieepi ami pnjjtes* n'[[in-iis &rftnr tfn-y ;ire sent to the smlet, or to 
process re-spumes «Jtn die srrvlet eoinpleled, hut brjwrlhr response. 

goes back to the client* 

The Container (fctfkie* when W invoke yuirr fillers hased mi drclaraiinns 
in the- DD. In ihc DD, thr dcploycr maps which fillers will Ix l called lor 
which request URL patterns. So it's the deploycr, not the programmer, 
who decide* which subset of reque&ls or responses should be processed by 
which idler*. 



tomin 9 *t of the 
t= the Wei 




Filter 



Fun things to do with Filters 



s ervle T 



can; 

►pel fat m mi m itj I heels? 
►refbrtoat request hcaden Of hodJei 
►audit or log requests 

Response lilirrs csau 

► compress the response stream 

►append or alter the response sti.-. in 

►create ;i different response altogether 




There is only ONE 
filter Interface, 
Filter. 

There's no such thing as a ^^SL 
or fiesponse&W interface-* s fUSt Filter. 
When we talk about a request filter a 

W«5sE (IW not (fie acit/al /Star inter- 
face As feras tfia Coroner /s concert 
there is oniy one tfnd of fflMnytfwig 
(hafi 
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filters and wrappers 

Filters are modular and configurable in the VV 

Filter* can be chained 'ji;*' l i i l - -^ to run tmt* aftef ikr stiver, l iln-i^ .ire 
designed (a Ih- totally self-rowainrd. A filler doesn T i am- wlrich (if . ■ ■ -> v 
filter* r;tn before it did, and \\ doesn't cure wbicli one will run next.* 

The DD controls the order in which litters run; we'll i:ilk .ihcm filter DD 
configuration a link Later In the chapter, 

DD configuration 1; 



tlsirig 1 1 a ■ - DD, yr.m can link them together by telling [lit; Container; "For these* 
URLs. run 111 In - I. I hen litter 7, then (liter !i, then run the large I servlct." 




Filter 1 Filter 7 Filter 3 



DD configuration 2: 

Then, wltli a quirk change to the DD. you can delete and *W* 
Tor these L'RLx. nm filler i, tin n filler 7. .md iheji the urget servtet" 



Virh 



Client 



Container 




Filter 1 




Filter 3 



Filter' 7 



* We're fudging little. The deploycr often r/n« need to ronligure the order 
based Lin I be consequences of the Iran* lor malicms performed by the iilters. 
Von wouldn't, for example, add a watermark to an limine . i r c ■ ■ wm .implied 
,i compression itlten in thai example, the watei marfc Gltet would have to do 
its thing Wore 'he d»l» hii* I In' t (-uiprettion Biter. The point is, you as tin- 
programmer wtii not build dependencies bio your code. 
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filters are like servlsts 



If fitters ore fike 
sei'vkts, then Tm guessing 
they must be invoked by the 
Container, just like servlets. 
They probably have their own 
lifecyele... 




Three ways filters are like servlets 

Riin's; ritfht, (iIuts live iti 1 1n- CbaUltOer. In many way? 

lin y ir similar n> ilinr ( (i-n-sicEniis. *m li-is. Here .in- .1 R-vi 

ways in which filters arc like senlels: 

The Container knows their API 

I'llteo have thoii 1 own Ai'L When a. Java cjaai implements 
liar Filter interface. It*j striking ;i deal with the Container, 
• 1 1 11 1 11 gitt-s fnim ln'ini; rt plant n]f| i to bring an offil lit] 
J2EE Filler. Other mt-niljers of the filler API ullutt filn-rs 
lo grl access to «ht- Sm ItrlCrjiitcXI. ami to hr linkr-il 10 

other filters. 



The Container manages their lifecycie 

|ust like Ktviftfts filters have a lifecycle. Like servleiM. 1 1 1 ■ ■ v 
have iiut() and destroyO methods. ShuLUir let a seivlet's 



»l*>rLWi f,l^v..ci ;; , , 

uujl uaL^j nil ill 



Llll'U. llllll.l Ullll rt 



t "■ h Lkl N 1 i_rl 
-l-cb ^ j I. J IT. IJIirLN 



They're declared in the DD 

A Weh ;>|j]> i;m have In Is ill" fill its. ..ififi :l %Wr\l rflqUCSl 
CM) LHiisr more than one filler Co cxmite. The 111) is (he 

I - 1 . «. : 1 V. Iii j'i • '. - H I 1. 1, i- u 1 1 |i 1 1 Mil rr- U ill |!l|, ,|| I ' ■ j i< M 

to which requests, and in which ordn. 
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PuiMN the request fraeking filter 

Our task h to enhance iii»- Beer appttonfon w riiat wtwnflwer 
someone request* any of the resources associated with updating 
Mvipi-s. ut-'ll h<- able i" krt-p Uracil r»r who madr the request. 
Hrn-"s one version of whftl siirh i filler mighi ln<ik liktr. 



«^ to editor 
^Snexf in line? 



package coFn.eK^mpl.eH web; 

import *y*-^ ^ art-^"^ E„rV filter MU£T 

import :avdx.servlet.*f ~ ^ / C *H l_ r... 

impart javax.setvlet.http.Hl.LpSenfietFtequBsU X 

public class Bee rRequest Filter implements Filter I 

private FilterConfig fc; 



tke Filter interface- 



V» m.*t ^le»e«t wdlty Y~ 
just ««« tHe WW "'ft djjfBW 



public void init (FilterCQrJIg eoiifir/) throws satvletExu&ption. | 
rhis.fc - config; 

public void rlo Filter (ServletRequest req, ^ ^frfr fJetttt tha ^ 

ServletP.esponse resp, ^— ^ ^TTP a " *^S*L«t and 

n i L^rchain ebai»> T *fa u& rt ^lar S*nteW«flP 

throws EervleLExeeptlon, IOExcoptioii | S^^^**** °^ tt ^*' 



HLLpSarvletRequest httpReq = (HfLtp3er'/ieLReqiifea t ) reqf <p 
String name = httpfteq.getRensoteUeer 0 ; 
if [name != null J I 

fcgetSer^'letCotitext 0 , log ("User * + name; t M is updating 1 *); 



But we're pretty svre 
thai Un «st the 
request and response t» 
their HTTP sMbiype*- 



I 



I 



chain. doFilter (req, reap) f 



public void destroy!) I 
// do cleanup stuff 



His is how the «*t filter or lerwlet 
i« Imt $eti edited - lots more on {Jm 
ih -fcKe «*t £«*ple of p aijes. 



\ 



V*u Mutt «*f let*e*t deitroyO 
but Ufjlty it's empty 
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A filter's life cycle 



[.'. riv IllU't IH1t\1 tiiL]llriiirtlL Hn s llili'r methods 111 llir 
I'ilt. r int. iI.kc: inil{). duFill«r{}. ,nnl d i- m Iruy f } . 

First there's initQ 

When the Container decides to instantiate a filter, 
the intt() method is yaw chaiice to de any *et-vtp 
tasks before the Bite* called, Th* mo*t coomKm 
impletnctitntldii was ibowa i>m the ptc\ , iou* page; 
saving ;i rcFerence K> [he FilterConfig trfijccl for 
latcT use In the lilter. 



doFirterQ does the heavy lifting 

J In do Filter (J method Is culled every lime tJie 
( i in I inner dtiteri tinier 1 1 1 >k i hr lihci should I n- 
applied tn [he mrmn rrtfuent The rioFilier 
mrthud takes dnee urmimmis: 

* A Servlel Re quest 

• nol . i e l lit tpS e rvle I Request if 

* A Sorvlci Response 

(not an H ttpS e rvlf tRu spans e) ! 

► \ FiiiprChain 

Tin- tluFilkTi) Tin llmd k your C&tncti In 
unplrmriil yottr filter's f urn.- lie «n , II' your [Tiler 
in supposed to log user names to a file,, do il in 
doFiltei-(). Want to compress the response output? 
Hi ii mi dnFUterQ, 



111 the end there's destroy () 

Winn the Container decidca to remove a filtci 

i(isi.un-f. ic '-ills lli' 1 d«sitr«y{} c 1 1 1 - 1 1 1 1 1 . f . ^Hirhj; 



you ;i chance to do any cleanup you 

bcl'orr llir iiisi.uur is destroyed. 



10 i 



^kreifir^Jit' „ 



WhatisafrfferCbW 



A: 

_[\ A FilterChain Is the coolest thfri g in all of 
Filt^r-dom. Filter? are designed to he modular 
building block* you can ml it together in a variety 
of ways to make a combination of things happen, 
and the FiltefChaln is a big part of what makes 
this possible. /f's thething thctknowi wfratcomes 
ni-x[. We already mentioned thai the Filters (not 
to mention the servlet) shouldn't know anything 
about the other filters, involved in the request... 
but stinieone needs to Know the order, rind 1 h-ril 
someone is the FilterChain, driven by the filter 
elements you specify in the DO. 

8y the way, FilterChain Is in the samp package as 
Filter, ja vax.iervlet, 

n> 

V^, I not ked t h at i n y our d oFi lter( ) method 
you made this call: thain-doFilterO... What's a 
doFiHerj) doing inside a doFi]ter()? Youre not 
gonna get all recursive on us, a re you? 



The FilterChain interface 1 * doFflterO is a little 
bit different than the Filter interface's doFilterO. 
Here's tl 1 main Jifteiehce- 

The doFilter[) method of theFfJferCAuin takes care 
of figuring out whose doHlierO method to invoke 
next (or, if it's the end of the chain, which servtet's 
service!) method), but (he doFilterd method in a 
Fitter actually does the filtering —the thing the fitttt 
was created to do. 

This means 3 FilterChain can invoke EITHER a filter or 
<a servlet, depending on whether it's the end of the 
chain. The end of the chain is always either a servlet 
ot a JSP (which means a .ISP's generated servlet, ot 
course], assuming the Container is able to map the 
request URL to a servlet or JSP. (If the Container can't 
locate the right resource for the request, the filler is 
never invoked.) 
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Think of filters as being "stackable" 

Tfae*Wfel s|"»fi: diK-sfl't diilliilf lh>\V tin* chain. £lt» Filt^T(i*&q, rasp] 

meihoc [liimJicH I hiskIf ifif container. In practice, ihmjgh. you can 
ilnnk i»l ilie process of filii'i-* diainmgto each othct ;is if they were 
simply method calis on a single slack, Wr- know there's more lt< ii n it on 
behind (he Homes in llic Container, but w: don'l care, as Ion £ us we can 
predict how our filters will run. and a fontifptrtti! I'if not physical) stacl 
lets lis do I hilt. 

A conceptual call stack example 

In this example, a request lor ScrvleiA will he tillered by two lilter*. 
Fllterf, ilien L'iltew. 



F Iter? 1 
| tlflF=ltcr(r.r,i}^ 




the stack 


the stack 


0 


e 


Upon getting 

the request, 

j-l r J... 

i Tit vun i umtf 

calls Fi (term's 
dflFilterQ method, 
which runs untif 
it encounters its 


Trie Container 

pushes Filter/ 5 
4*-CU f\ -k-i j 

on the top of the 
stock - where it 
executes until it 
reaches its chom 


ehdn.doFilterO 
coll. 


doFilterO call. 



<5ervlefrA\ 
ser viceQ g 

\ Filter? I i 
doFiltcr(r.r.c)\ 1 

~ lrcr'3 
doFilte 



Tlus "conceptual StaeV 
isjuslawaytatirinli: 
about filter chain 
invocations. We don't 
know (or care) how 
tfie Container actually 

implements te-but 
ttenfongof rtthis^y 
lets you predict how 
your filter chain will 
behave. 




the stack 

o 

The Container 
pushes Servle+A's 

on the top of 
t'-.c stack ■j.-kcrc 
it executes to 
completion, arid is 
then popped off 
the stack- 



Filter? 
doFilter(r ,r,c) 

Filter3 

the stack 

o 



The Container 
returns control to 
C:l+„_"7 ,.,L 

I 1 1 I til r v^iinitim 

doFNter() method 
completes and is 
then popped off. 




the stack 



The Container 
returns control to 
Fs!^£i 1 3 «vhsr£ Its 
doF'lter() method 
completes, and is 
popped off. Then 
the Container 
completes the 



you flrs here * 709 



configuring filtsrs 



Pe&laring and ordering filters 

When si>" COB%B« ElteiS in the DO. usually t\a tkfei tiling. 

► Ditclaj* ytiwr filtei 

* Map yimr filter i" iln- wet> re*ourc« you Want n* fiber 
>■ Arrange these niappirigii m i restte tiluTiiivm-.ni.ni swpjeacisi 

Declaring a filter 

<filter> 

< f i 1 te t -name > Bee r Requ es t < / f i. 1 1 e r - na me> 

< f il Ce r-class 2" com . examp 1 e ■ we b ■ Bee r Reque stFiltei 

^init-parani> 

paraHi-name^LurgFileNajsie^/param-naine:' 
< pa ram- val ue >UserLog . t xt < /param- value > 
< /in it-par atn> 
</f liter* 



Rules for <filter> 

* The <f ilter-name* is mandatory. 

* The <filter-class> is mandatory 

* The <inrt-par3m> ts optional and 
you can have many. 



Declaring a filter mapping to a 
URL pattern 

•-ill Let -mappings 

--. E i 1 1 er-na5ne>Bee r Reque s t < / f i 1 1 e r-name > 
<ui 1 -pa t te r n>* , do</ sir 1 -pa t terft> 

</filter-mapping> 



Declaring a filter mapping to a 
servlet name 

< f i 1 1 er-mapp ing> 

< filter-name >Beerf<eqiiest<: } filter -name> 

HLaervlet- name jAdv Ice Servle t< f se rvlet- name > 

< I f i 1 1 er -iriapp ing> 



Rules for <filter-mapping> 

*■ The <ffltef-name> is mandatory and il is used 
lo link lo the correct <<iller> element 

► Either the <u l-pattenp or Bis the 
<servtel-name* element fs mandatory. 

► The <uri-pattem> element defines whtch web 
app resources will use ttiis filter. 



► The <5eraletname= element defines which 
single wph app rfiftni am will i ise this flier 



IMPORTANT: The Container's rules for ordering filters: 

When more lhan one filter is mapped to a given resource, the Container uses Ihe following rules: 

1) ALL filters with matching URL patterns are located first. This is NOT the same as the URL mapping 
njles (he Container uses to choose the 'winner 1 when a client makes a request for a resource, because 
ALL filters that match will be placed in the chain!! Filters with matching JRL patterns are placed in the 
chain in the order in which they are declared in the 0D. 

2) Once all filters with matching URLs are placed in Ihe chain, Ihe Container does Ihe same thing with 
filters that have a matching <serv1et*name> in the DD. 
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fitters and wrappers 



Isn't THAT typical... they give us □ way 

to filter r^tjueits coming from □ cffent. 

and they just forget o'l odoltt requests 
that WE generate through forwards and 
requesrr dispatches. $ces... they tncot 
request dispatching like if s a second- 
class invocation technique-?! 



News Flash: As of version 24, filters 
can be applied to request dispatchers 

Think ahom it. Ii"> great l Inn liltcrs can br applied tn requests 
thai enmc dircclly Ipuh i li « - i tifnl, But whul about rcsourrcs 
requested fhnni n forward ni include, request dispatch. 
,j[li.I - Us iln error handler? Hervlet spec 3.4 to the rescue. 



Declaring a filter mapping for 
request-dispatched web resources 

<f i It e r- mapp i n g> 

< fllter-name^Moiiitoi Filters / f 11 ter-name> 
<url-patt ern> * f <io< /url -pat tern > 

< dispatcher >REQOEST<: / dispatcher^ 

- and / or - 

•^dispatcher >INCLUDE- / dispatcher > 

- and / or ■ 

•■.dispatcher:-- FORWARD / d i spat che r > 

- and / or - 

< d ispat che r .ERROR-, ^dispatchers 
</f ilter-mapping> 



Declaration Rules 

► TTie <filter-name> is mandatory 

*■ E ithe i lhe <Ur|-pa!tern > or <:>isrvlet-n a-rno 
element is mandatory. 

► You can have from 0 to 4 <di5patcher> elements. 

* A REQUEST value activates ttie filter for client 
requests If no <dtspatcter> element Is present, 
REQUEST is the default. 

► An INCLUDE value activates the filter for request 
dispatching from an included call 

► A FORWARD value activates the filler for request 
dispatching from a forward; ) call. 

► Art ERROR value activates the filter for resources 
caHedbyttieenor handler 
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filter configuration exercise 




Based on the following DD fragment, write down the sequence in which 
the filters will be executed for each request path. Assume Fi Iter 1 through 
Filters have been properly declared, and that (he servlet names are the 
same as their mappings. (Answers are at the end of this cnapter.) 



<-t ilte r -mapp ing> 

<filtei:^ndrae.>Filterl<Vfiltei-iiajtie> 
<ui 1-pa ttern.-'/Reci pes/ *</ur 1 -patterns 

■:/filter-mapping> 



tf ilte t -mapp ing> 

<f ilter-name>Filter2</f ilter-name> 

<se r v let -nariio / Re c ip&s / U ops Li s t . do< / se r vl et-n ame- > 
t / f i 1 te r -mappi rig > 

c filter. -mappings 

v J sir 1 -pat t e rn > / Rec ipe a / Md/ * < / u r 1 -pat t e rn > 
</f ilter-mapping> 

< f ilte r -mapping > 

< f i 1 1 g; i -nanics F ii te r4 / f i 1 1 dr- name > 

<5^r^iet-nanve>/R^cipes/Mi.^i£y/Mi^ecip^S»cjo</Servl^t-naJ7ie> 
</ filter-mappings 

i Iter-mapping-' 

< f i 1 ter-jianje>Fi lte r 5< /filter -n ame> 
<url-pattern>/*< /url-pattetn? 



</filter-mapping> 



Request path 



Filter Sequence 



Filisrs: 



/Rec ipes / HopsLi s t . do 



Fitters: 




do 



Filters: 



/HopsList.do 



Filters: 



/ Rec ipes / Add/ AddRo c ipe s , do 



Filters: 
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Compressing output with a response -side filter 

Earlier we showed a very simple *^/tdj j .sf filter, But now we'll look at a wponi? 
filter. Response filters «ie ;i hit niekier, hut they cm incredibly useful. They 
li'i m do something to ilie response output alter ilif wrvlet does its rhtngi 
hm before (lie response B mH to die client, So instead • ■ t stepping in m the 
beginning — i^/fer? the servlct gets the request — we step in at the end — n/kr the 
servlet gets the request and generates a response. 

Well, fori of... limit about it, Hlters are n/:t'<j)'.r invoked in the chain ^r/iwdic 
servlet. There's no such thing a* a iiltei 1 that Ls invoiced only after the $srvict 
Hut... remember that stsfj; picture. The filter tytz another shot at this after 

thif survtc-t completes iL*Mork and is popped ufT Lht? (virtUsd} *tut:k! 
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a response fitter 



Architecture of a response filter 

Racitcj is talking about tlw bask stmt twre of wbai von put in 
,i daFHterQ nicifioiJ Tirsi j^ou do wark related to the request, 
then you eaJ] diaiii-dnFilin'd. then finally, wbeti tin' khvIci 
;my other filter in ihr chain after your fitter) completes and 
control is returned to your original doFillcrijiiu'thodL you can 
■ iii 1 1 1 l i - 1 J j t li ut to iho response. 

Rachel's pseudo-code for the compression fitter 

class KyCompressionFilter imp Lenient a Filter j 
init { ) ; 

void doFilter {request, response* chain; 
'/ this Is where request handling would go 
lain .doFilter ( request , response 




destroy (> ; 



Millet dots '"t* 



Th<* conceptual 




The Compression 
filter's doFilterQ 
mat hod runs r and 
invokes choin doFilter(). 
It's toe eorly to do 
any compression— the 
gool is to compress the 
response output from 
the Servlet. 




The Servlet's serviceQ 
method goes on the 
top of the. stock, does 
some work, generates 
o response output, and 
completes, 




Now that the ServFet's 
serviceQ method 
hos popped oft the 
stock, the rest of the 
compression filter's 
doFilterQ method can 
run, and (it hopes) do the 
compression on whatever 
the servlet wrote to the 
response output! 
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Put is it really thatsiwpk? 

Duen tiOTEtprewjig * hr reaport&e ivaily iiu , o!h,f nothing mofi? than 
waiting for t&e stervtci to finish, then rontprening the service'* 
KSjBOwe output? After alii d«e Bltei s doRUm) unshod [mi ;i 
refctcacc m (fee nunc response object ih;it wnn to the ictvlet, so in 

theory* ihc filter should have access to the response output,.. 



public void doFilter (request, response, chain} [ 
// this is where request handling would go 
chiln . doFI Iter [request, response),* ^ 
// do compress ion logic here (§\ 



Client 




1 The filler passes lhe reqt>es1 
and response Ed the serdeL, and 
warts patiently for i!s chance to 
compress stuff. 



3 The call to cham.dQFitterO has 
returned , arid the Mef hnpinn 
to grab the output and and start 



EXCEPT it's too latei The output was 
already sent to Ihe client' The Container 
doesn't buffer the output for the filter 
By Ihe time the filter's owh dofftetfj 
method is at the top of the ( conceptual ( 
stack, it's too late for the filter to 



we wtfu£ 



Output 
Stream 



2 a The servlet does lis thing 
creating output, blissfully unaware 
thai this vejy safi>e output was 
supposed to be compressed 

2 b The output goes back 
through the Container and 

2c II s sent back to the client! 
Hmrniri.. this could t>9 a problem 
The fitter was hoping to haw a 
chance to do something lo the 
output (compress It) before the 
output went Id Hie client. 
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filtering the ovipvl 



The output has left the building 



This won't work? I can't 
compress something on the woy 
out of the servlet, because it's too late. 
The output goes straight from the servlet 
book to the client, But the whole point is 
to compress the output, so how cor I 
get control of the output BEFORE it 
gees to the client? 





Think about this for a minute... the servlet 
actually gets the output stream or writer 
from the response object What if instead 
of passing the RE/L response object to the servlct. 
■your filter swopped ir.fi custom response object 
with on output st^ecm tjiat you control ? Nobody 
said the filter has to pass the REAL response 
when it cells ehain..a'sFilter{)... 




Or 



Contoiner 



^■ijinal revest ind rtsfeme 



'I 

cham.doFilter(» f) ) 




Servlet 



Filter 
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We can implement our OWN response 

The Coiuaifter already impii-nu'iiis iin- HttpServbuResponse tntwface; tint's 

what wn get in the doRlterl j *sd lervicwfl tm-thiKis. Bui rn ihis prtsskm 

filler w.uking, w hswe in make our wjj cuMom implemeniation of die 
111 ipSrrvlri Response- inn-i l;n r and pass ftaj to thesewlfji vin ihr thaiii.duFilin-i;' 
call, And that custom implementation has let also inc lude a custom outpiif strmm as 
well, since dial's the goaJ — to capture the output tijisr the servlel writes U3 it l>ul 
bffort it rocs buck to the client. 



The filter pastes a tmtom "MyRespoh*', 
whLth implements MttpServletRespohse 
(instead of the engjnil RE^L i-eip*Me 
the C*^iT>er ? a«d b the filter) 




The "AlyRei^Kse" objefrt aim has a Shitm* 
. output stream that compresses the data 
*trtt** by the lei-vlet, a*d then, tends the 
compressed data to titt on^M owtput 
tttea* fthat ye* baek t* the client). 



The "MyKeifowe" object 
delegate* (paMe*-thrc*»^h) 
»tt of the tsiU rt iree eivei. 



CM 

Filters pa*s ServSetReques-t and Servlet Response objects, to the newt 
thing in the chain, NOT HttpServtet Response! So why ore you talking about 
implementing HttpServletRespanse? 

A: 

£\ i iltors were designed to be generic, and so officially, you're rig hit. if we 
ihnunhi mw nf our filter* might be used in a rtan-web app, we'd be implementing 
the oom ■HTTP interface fSarvlet Response), but today, the chances of someone 
developing non-HTTP servlets. is close 10 zero, so we're not worried. And since 
ServletResponae ii the uipertypeaf HtipServleiResponse, there's no problem passing 
an HttpServletftesponse where a ServietResponseis expected, 
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implementing HttpServietResponse 



HttpServletResponse is 
such o complicated interface., 
if only there were a way to 
avoid implementing dl those methods 
and delegating cafls to the red 
response... 



Ser vletResponse interface 

(ja vax .servlel . Se rvletResponse ) 




She doesn't know about the servlet Wrapper classes 

Greating ymir mvn itiMnm HtipNrnlt-iReipanK 
bnplemtrttfrtioi) teenUhe ;i Especially when $13 
von Wiinl hi implrmr-nl ;irf jllsl a_/*W nf (lie nu'l liud-s. 
Afld sipec nltpStn isrtRrirpanSc is an interlace thai 
extends another interlace, lo implement your awn 
Custom response, you'd have Lo Implement fi'tiytttinp, 
m both HttpServl«R«pon*p audit* suprriniertiu-e, 

nOrv|f:lRij:H|](iTlsL*. 

[tin fbrtunatety; souwotw .it Sun did thai far yn. by 
preatfag 11 Mtppprl cohvettieure claaa thai implement] iln- 
f lii|>Km-ldR<-spiiisr- bawtfkee. All of the tuetboda in thai 
i (aw delegate the mils In ihr underlying n ul response 
Created hv the Container, 



SefyJetflesponae 




selCentenfNVpefi 
//MAHY more methods.. 



HttpServlet Response interface 

^ax.servlel htip HttpServletResponse) 



Hftp-Servte [Response 



stfc/DsfeHeadenfJ 
encodeP«li'recfL/ffl.(l 

seSStstusf) 
ft mom nwHwds 



Remember, to "»f lement 
tHtf>£n-y|eHeif«rse you ta*e to 

both it and rti iuDenntev-fatf 
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Wrappers rock 



The wrapper classes in the servlct AIM are awesome they 
implement .ill die method* neected for tlie thing you're 
trying to wrap, delegating all calk 10 the underlying request 
or response object. All you need to do is extend one of thc 
wrappers, and override jus! the methods yon need tD do ■your 
custom work. 

YquVc seen support classes in ihe J USE API, of course, with 
things like ihe Listeni?!' adapter classes tor (iL'U. And youfye 
seen them in die JSP .API witli the i iismni tag support classes. 

Rut while those SUppfift classes arid these Bfld rt^|k>ilSe 

wrappers are :ill convenience classes, ihe wrapper* are a link 
different became they, well, tbtop an object of (lie type they 
implement. In other word*, they don't just provide an inttrjarr 
iiiipleiiifiilntioH, they actually hold si refisri^nce to an object of 
the same interface type to which they delegate method calls. 
;By the way, tliih lias noiliing whatsoever to do with th«J2S£ 
■'prinuiive Wrapper" e kisses like Integer. Boolean. Double. etc.; 



Creating a specialized werttOH of .1 request or response Mich ,1 
coitimon approach when (-rearing fillers, iliut Sim has created 
four "convenience" elites to niiiki- tin- |oh easier; 



* Seri'IetRequestWrapper 

* UttpServletRequestWrapper 

* ServietResponseWrapper 

* M 1 1 pSe r v le tlte sp<j n a oW 1 appal 



Although not ^xpHcitly listed In the 
■JHrfai nfalectiveS, you MIGHT 
*- on th* 



1 



thing it wraps. mitef fhan bemo a r 



respor.se object) 




WrsppEE (the ori^rdl 
Cwtj'hfr- treated 
response object) 



create a custom Fewest 
or response object, 
just subclass one of trie 
convenience Fewest 
or response "wrapper" 
classes. 

A wrapper wraps the 
REAL request or response 

1 . 1 „ „ . J J ., 1 ..n Aj -■.<-. 

(passes through) calls 
to the real thing, while 
Still letting you do the 
extra togs you need for 
your custom revest or 
response. 
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3 response film 



Adding a simple Wrapper to the design 

h&U rahmcn Rachel's lir*i pseudcHsode t>y adding a wrapper. 

Compression filter design, version 2 (pseudocode) 

class CCtapEessionEesporiEeWrappec extends Ht tpServle tFke spo qs eWxapper 

// override any methods you want to customize 

I 



class MyCcimpressionFilcer implements Filter [ 

public void init I filter-Config cfg) I | 

public void doFilter ( request, response, chair.) 

Compress i onRe spon EeWrappe r wrappedResp 

- T\mt CorapresaionResponseWrappex (re sponge. > : 




. The att »f NWW*^" the 
with c*r fcnfeft, Wrapper dl** 



chain. doFilterlrequRsf, wrappedBespl ; 

//da compression logic here 

l 

public void destroy 0 I I 



No* we tend th,s Jlc^i, down the filter 
ihiin- None of tint tompunents down -the 
tnJir. will ever khovi that -the response 
object they jot wa* a tmsW job 




Container 



1 The filler passes the raquesl 
ob^ct and a custom response 
object to the serviet. 



2 Since we didn't overrate any 
methods in Hie Wrapper, the oulpot 

j... yet. 



Output 
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filters and wrappers 



Add an output stream Wrapper 



Ut's-^kl ;t seeond Wrapper.;, 

class nompressionResponeeWrapper extends Hfctp5ervle^P!esponseW rapper I 



Compression filter design, version 3 (pseudocode 




public ServLetOutputStream g*tOutputStr«an { ) throws... I 



servletGzipOS = new GzipSOS {resp 4 getOutputStream () 1 ? 
return BErvletGzipOE? 

/ / maybe override other methods ^oe^r 3sVs $w °** 



class MyCorapressionFilter impleiaerits Filter I 

public void inlfc(FilterConflg erg) I I 

public void doFilterl request, response, chain) ) 

Comp r e s s i onke spc-riso Wr^ppe r wr appedRe-s p 

- new CompressionRespflnseWrapper (response) ; 

-ha in.doFi Iter (request, MxappedBeap) ; 

// do compression logic here 

1 

public void destroy (} I I 



wi-th our tmm 
now irt'v Sis*i« 3«jp 




Container 



1 The filler passes the request 

nhjfirl a nr) a custom nfispnnsR 
Dbject to the servlet. The 
LUisiuril fHspunst has a Bp9uai 
getOutputStream method 



2 Wiien the servtet asks for an 
output stream it doesn't KNOW 
thai it will get a 'special" output 
siream. 
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response compression filter 



The real compression filter code 

Tints hi 1-Hjclt-. We frftd thijM fciptrt by looking si the code 
Ear bcufi the compression filter and ihe. wrapper it use*. 
We re expanding funn the previous discussion, and while 
there is some new stuff here, it's mostly ptajajava code. 

This filler provides h iriechmiisni i-ompress (lie respond' 
body content. This lype of filler would commonly I"' 
applied Lf> any text content auch as HTML, but not to most 
media formats sueh us, PNtJ or MPEG, because they are 
already cuinpM*se& 

package com. example. web: 
intporr javax.servl-et . *; 
import java.io. 1 , - 

import j ava . ut i 1 . z ip . GZ I POut pu t St re am ; 




nee* t„ study 








public class Compress ionFilter implements Filter I 



private FervIetCc 
private FiiterCot 



.ext 



:tx? 



public void Init (FilterConfig. cfg) 
throws ServletException I 
this.cfg = 

ctx = cfg.getServletContext D ; 

etX.l^-fq.^tFiHerNamell + " initialised. ") } 

I 



The Wt "*"tW t>* ft»l (J % fi, t- 
awi j *^ik «f«y»£f lo the KW* 



public void dofilterjServletReqijeEt req, 
SetvlstEfisportac! reap, 
FiiterChain tel 
throws iOExceptian, ServletException | 
HttpServLetReque-st request = (HttpServletReguest) 



Tin heart oi tfc« f ilW wrap the ve^e 

otyed; *d* J DttorSk* that wrap* the <wtf«t 

stream v-rth a c^p^em™ I/O tt«a». 
Cotrfrtw* <>f the outfit (b*a* it J**4en*rd 
EnCadfe^ header fspetrf rfJlly, £tt 



req,- 



HttpServIetBLeapor.sc response = (tLttpServletftesponse) resp; 



String va!id_encodings = request .getHeadcr ("Accept -Encoding") ; ^ Dcei the tl**t J«ept 

if ( vaUd_encodingp.indexOf. PgKip"} > -1 ) \ g^jp ^ ^ 

^rappadftesp - tf « r ^ the «^ dbjerf 

- n.w ConrpressionResponseWrapper (response) : ^ ^ £0*^™ U-apftr 
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filters and wrappers 



Compression filter code, cont 



Debugging Tip! 

TO tfvl lili-: flllCI. (T3J1I i lll'll I Hill llll 

Rue of <inli-. You i\ U ftee Ble^ible, 

compressed duu hi Jtaur browser. 



viiappedResp.sctHeader ("Content-Encoding", "gzip* ) / <^~~ " ^ 4- lS be 1 ^ 

fc.doFiltex (request, wrappfwfltMp) ^ Chain to the *e*t Component 



GZIPOutputStream gzos- = wrappedResp.getGZIPOutputStreamO ; 
g^Of. . finish () ; 



ctx..l.og(cfg*getriJterffamcO * finished the re-guest*") t 
J else \ 

ctK. log(cfg.getFiltertiame j) + no encoding performed. *} j 
f c.doFi Iter (request , response}; 



public void destroy () j 

// nulling out my instance variables 
cfg - null; 
ctx = null/ 



"Off the path- 
Compression meets HTTP 

H'»u din-* tUf server hu*w ii can nettd comprcjned data? Him 

- Use DWWjk* hrimv when it's p-t(in^ I'timprrmtil diitu,' ll 
mi us mil thiii HTTP is "comprcsifion-awarc"; here'* how ii 
works: 

* One i:tf the headers dint ihe browser sends ^Aeeept-Encudinnf: 
pip";., teOs tlx- (WW about die hmwwni cit^ihilitie*. |hr 
drilling widi different types nfVnntrni. 

* If (ttr wncr ■it-ts thai llie browsftf tan deal widi umipressed 
data, ii will perli >nn the COUfirt&Sott, L-uid add a header 

-Lkintciit-EiKocling: fjzip"). to the raiponsc. 
► \\~lit-n the bupwsei receives the reipoiise, 1 1 j 4 ■ "ponusit- 
RmiKliitjr: jr/jp" hc;i(lcr rrlls ihe Ijh^mi iinh-compreai ilir 
il.n.i Ijeforr ii in cliHpliiy^l. 



nU st be "f mished I Yihltk 

also flwKei -the tj^lP ttrea« 
buffer, and se»ds all o£ its 
data to the ordinal respite 

The deniameir handles the 
Test o£ the w«rk 
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response compression wrapper 

Compression wrapper code 

We looked m the Gcmpresiion Gltet; now tet^i take a took ai the 
wrapper ii usct. This is rme i>r 'lie mwl compficwed topics in A\ of 
sen li'i-Jom. s.s doc'1 panic if yow doii'i grxsk it ihc firsi liine- 

Tliis response wrapper decorates the original response objeel In 
adding -i compression decorator on die original tcrvfoi otttpui stream. 



package com.exaniF Le.web; 

// Servlet iroporte 

import javaji.servlet.http.*; 

import javax,aervlet . ' r 

// I/O imports 

import java.io.*; 

import j4V^,util»aip,GSTPOutpqtgttEani,' 

class Camp re sa ionReapon be Wrapper extends H ttpServ ] e tRespon a eWrapper I 

^-*** The towif^osed ptfyA sfcre^ m 
private GZlPServletOutputStJMiii sc-rvlL'tuzipOS = null; ^ ^' rt5 ? onse 

private PrintWrlter pw = null; ^ ■ The PnhtWnter object t» th< 

towfrtned mrtpi>t itttlM 

CoraprsssionResponseWrapper (HttpaervletEesponse resp) < 

super (reap) ; ^ The tuper ton janitor ferkms the 

) Deicrtr*t=*r reipentibilrty of ttrtnr^ d 

rtitnrU {p the object bdnj} dttoeaied, 
in tai* the HTTP v-tipo** object 

public void MtContentLengthjint len) ( I ^ — Ignore tha p*eth«i-the e*t- 

public G2lPDutput3ti^^m getS2lPOutputSt±*!anH) \ 
return thi 5 . rv i e c '1 z ipos . i n t e rna l£z ipQS ; 

^ "This decorabr method, uwd by th< filter, 
-the con»erjssio>i filter * handle oh the 

output rbreim so that tilt Alter iJn 

tod fU the fcJP 
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filters and wrappers 



Compression wrapper code, cont 



Provide itU* to a debated 

(Cvvltt output st«a>* 



private Object streaJisLtsed = null; 
public Servletoutpucstream getoutputstream t ) throws tOExeeptiiw | 



if ( (5tt-E?^mU5ed !- null) S6 (etreatflO^Rd !- pw) ) f 
throw new IllegalStateExcepticm ( ) ; <" 

if ( aervletG2ip05 == null ) | 
servletazipOS 

- new GZlPServletOutpirtStreamlgetvResponse ( I 

.getOutputStream 0 J ; ^* 

streamUsed - servletGzipOS; 

I 

return servletOzipOS; 



Allow 0ic Kwiet t* attest * w^et <»tput 
jtrtj*,, only if the servlet tas not already 
accessed the print vjrrtrr 

* S * Wrap tke cr^rjl septet output 
xt»j» wth our to-iorea™ 
serwlet output sb^- 



Providr auess t> a detected 

print wrter. 

public Print Writer g*tWrit«E<) throws IOException I 

if ( (streamUse-ii != null) 6« (streamUsed != BeruletGzipOSy ) ; 

tJuQw new rlleyalstateEKceptiun 0 ; 
* Allow the street to AiteM a pn*t writer, 

»,|y the wrvlet has «*t already Mussed 
tSe Jervlet output sb-edm 



If ( pw == null J I 



servletGzipOS 

= new GSIPServletOutputStreainlgetPesponseO 

. getOutputStream ( ) ) t > 

OiitputStreamWriter OM 

= new OutpUtStreajmWriter I^ervletGalpOS, 

getPesponse f) . getCharacterEncoding f } I i 

pw = new PrintWriter (oew) ; 
streamGsfid - pw; 

I 

return pw; 



To mlkt a print writer, we kivc 
to first wrjp the servlet output 

rtrein* and then wrip the 
to™pvesiion seimlet output itrea* 
Ih two additional output rtrcdtn 
decorator* 0utput£trtai»W"-t4ir 
whiih tonufrti Character! thto 
bytes, and then a rWtWnUr or, 
t»p of the OutputEtred^Wrrter 
objett 
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response output tecorafor 



Compression wrapper; helper class code 



This helper class is tt Decorator on the ServlHOmpmStivam whsmn/i 
( l[tss tvliirh tM<:i;atr> the- rea! work of mniprrsMng the generated 
Confetti using >i st LtnctniTtJ ti/ll 1 output »lrt-;im. 

Tin -re is only que ;»li>ir;ici method in the ServlrtOuumiSirejttf thill 
this DccoTittor must implement: writefiut). This is where nil of the 
delegation magic occurs! 

Class GZIPServletOutputStneam extendi SetVleLOU tptltStPgiUtl f 



GSIPServletOutputStxeaio(3efvlf; tOut put St ream 505) throwa TOException ( 
this. liiternalGzipOS = new GZIPOutputstreamfets J i 

J 



public void write (i nt Liarim) throws java.io. lOExceptlon \ 
internalGzipOS. write (parani) ; 



GZ I POutput S t r earn i nt e r nalGz ipOS j 



'"■ Decoiator constructor 
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rpen your pencil 



ANSWERS 



Write down the sequence in which the fitters 
wiH be executed for each request path. 
Assume FilteM - FilterS have been properly 
declared. 



<-t ilte r -mapp ing> 

< f i 1 1 er -name.>FiIte r 1<7 f i 1 tei -n aine > 
<url-paLLern>/Recipes/»</Lirl.-pattern;- 

/ f i 1 te r-mappi ng > 

tf ilter-mapping> 

<f ilter-natne>Fiiter2</f ilter-name> 

< se rvlet -namo / Its c ipes / W ops List. do< / se rvl et-n ame-> 
« / f i 1 te r -mappi rig > 

c filter -mappings 

<f ilter-natnH^Fi \ tar-K/f il hErr-naine> 

< sir 1-pat t e rn > / Rec ipe a / Md/ * < / u r 1 -pat t e r n> 
< / f i 1 te r-ma pp i ng> 

< filter -mapping > 

< f 1 1 1 g; i -nanics 8 ii te r-4 <i 1 f i 1 1 er-name > 

<se 1 et -n ame > / Re c ipeS/Medify /tfodRec; ipe $ ♦ cio< / S e r v 1 e t -name > 
< / fl 1 te r-mappl ng> 

i Iter-mapping-' 

< f i 1 1 er-n<iroe>F i I te r 5< / f i 1 1 e r -n ame > 
<url-pattern>/*</Lirl-patter:i> 

</ filter -mappings 



Request path 



Filter Sequence 



Filters: 1 




/Rec ipes / HopsLi s t . do 



Fitters: 1, 



5, 



2 




do 



Fitters: 1, 



5, 



4 



/HopsList.do 



Fitters: 5 



/Recipes/ Add/ AddRocipes , do 



Filters: 1, 



3. 



5 
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mock exam 




Whii-h -w- ithmn Hirers? (Choo* .ill 1 1 i.n apply,) 

3 A, A filler can aci ot\ only the retjuesjt or response btijecTj 

lint bni.ll- 

O B. The destroy method is always a i uataintr csllb^ci 
in ft hod. 

G C. The doFilter method is always a container 
rollback method. 

Q [), The ituJy way a. Tiller can be invoked is through it 
dectaratioa in the DD. 

G ft The aest filler in a Tiller chain can Ik ip*6lEed eittji I 
by i lie previous filter hit in i lir- DD. 



^ V" 1 1 ii i - H i arc true aboul declaring fili+ rs in the DDi* 
< IhtxtHr all dial apply,) 

□ A, Unlike --ivlrts, filters CANNOT drdnrc miUaJbato pKrametejs, 

Q B< Filter chain order in always determined by the order the elcnirnts 
appear in the DD, 

Q I 1 ,\( lasi ihat extendi an API reqtiesi 6f peipdrtte. wrapper class 
must be r|e< luri d in ihe DD. 

U 1), A class that extends an API request or response wrapper class is 
Lump the [iitcrcc-ptin^ Filler pattern. 

Q I',, Filler chain order is affected by whether filter mappings are 
ik Juml via <uil-patteiri> <n via <seivlct-ridtue>. 
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filters and wrappers 



Given i In ckus UnerRequfsi ts an implementation di" HupSei'vleikje-qmisL. and given thai this method 
in ewi otitewise properly deFtned Filter implementation; 

20. public void doFilter (servletftequest req, 

21. ServletRe spoil se response, 

22. FilterChain chain) 

22. throws IOKxception , ServlGtException | 

23. HttpServletRequest request - (HttpServletRequest) req; 
23. HttpSessaon session - request. getSession () ; 

25. object user - session. getAttribute ("user") ; 

26. if (user ?= null) i 

27. User Request ureq - new Use r Request (request , user) , 

28. chain, doFiltcr (uroq, response) ; 

29. ) else ( 

30. RequestDispateher rd ■= request .getRequestTJispaterier (V login . jsp") ; 

31. rd. forward (request, response) ; 

32. } 

33. } 

Which is try*? 

U \. \u exception will always be thrnwn if linr 81 eSectltefc 

□ li. Line 2« is invalid tfecvtpe request mu*i be passed 

us I be fiftt argument. 

□ This line: chain. doFi Iter (request, response) 

must be inserted somewhere in 1 1 ■ ■- else block. 

Q L>. This method dots api properly implement 

Fa I tc T , d i>Fi 1 1 e T { j b-t-CaUs-t- tiTt" ITitj i hod 

MjrjKiturt? is incorrect. 
Q IL None of [he above, 
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mock --■:<:■:',■'■ i 



Given it partial <]fp]i tym^tH dtsn ipUir: 

11. <filter> 

12. <fllter-name>My Filter</filter-name> 

13 . <llltet -class >eom , example .MyFil ter</fLlter- class :> 

14. </filter> 

15 . <filter-iitapping> 

16. <filter-name>My Fi lter</fD_ter-name> 

17. <url-pattern>/my</url-patterii> 

18. </ElteE-mapping> 

19. <servlet> 

20. <servlet-name>My Setvlet</servlet-name> 

21 . <servlet-class>com. example .My£ervlet</servlct - 

ClQS3> 

22. </s«vlet> 

23. <servlet-mapping> 

24 . <ser vl e t - n ame>My Servlet</servlet-name> 
2 b . <url-pattern>/my</url -pattern^ 
26. </sej:vlet-niapping?- 

wukh is dm - J phoofte all that ->ppiv 

□ A, Tin- fili- Ih mviiliil 1>it:him< ihr l.'kl. |i; in /my 

i-. Mi.i|i]H'd tn l«»Ui ;t Hnrvlet and .< Bltcr. 

Ul H. J'lii' lilt* is i&VaJkl because neither the lervlel name 
jttbr tin- filtt-j- ii, urn H aflowed n itamapfccefc 

Q C. The liJ(< i MyFilter will be itwiked after flic 

MyServlet ni-rvk-t Tor «;uft r^ui'st th:ii m:ii<;hctt 
1 1 K- pin i cm /my 

LI Ti, 'J" he liltiT My Pi 1 tar wilt br invoked I j dare t& 

MyServlet -. n In II <i c.n h n i 1 1 n^c ih;ii rn.ii. In - 
i In- pattern /my 

Ll \L The Hie is invalid hec-aus* thf <filter> i?lcnacnl must 
coittfilii .i <servlet-name> c-Irini-ul llusi defines 
which serttel 1 1 ■■ Bftet should hi- npplii:d in. 
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Winch atattit filters are Ifue? (Chptttt all ihai apply,] 

□ A. f"i I sent i^aj tit used to create rctjueist of tt^pt)i^e wtiippe^', 

u) li. \\V:i|i[KTH []i;i> lit- Lined lo creatr request or fgBpor&e fillers, 

Q (.'. L'tilikt- sfwlcis. filter tnitjaJizatibn eiieljis sltn^uki hi* placed it; 
the cortatrrtctoj min 1 1 ii re i ii 1 1 ini t ( ) methbtu 

tuppon u) uutiaUzatian mechanism thai include* an 
init{) method dial is frjiarantced to be calkd before ihe 
filler i* used to handle request*. 

□ |;_ \ lili. i \ doFilter ( J mrt li'id tiihiI i :t 11 dqFilter ( } i nt 

die input FilterChain objeel in order to ensure thai all 
filler* have a chance lo execute, 

Gl K When calling doT liter () mi ihe input Fil terChain. 
,i Elters doFilter () unshod must pass in the same 
ServletRoqucst . . r i - 1 ServletEcsponso ol>jr. I-, iEi.h 

wer* passed iiiin u. 

□ si A li]i.i-ra doFilter () may block fWthet request processing 



Which arc inn- about ihe srrvlei Wrapper rlawes? I Choose all ihiit apply, i 
O A. They provide the duly mechanism fur wrapping 




□ B. They can In- used to decorate classes thai implement 

Filter. 

□ ( :. ['In •■. can be used even when the stpplicaticm tines 

W IT nuppori HTTP. 

Q I), Tin API purt IT ■, \\i . 1 1 ii ■ r :- im SorvletRjequost 
SarvletRespcmse, ami Filter Chain ohjfica 

Q K. The} implement the Intercepting FlUef pattern, 

Ul l ; . When you subclass a wrapper r Ili-ss, you must override 
at least one of the wrapper class 1 * methods. 
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mock answers 



3 



Which SIT fcrUC almni llltt-rs? [CJioom .ill ,i]i|>lv.| ^ ^Ift itttio** ^) 

Q A. A |l]tcr C'jiiri <u-t mi only tin' replies! or rt^ponise object, 
nnt both. 



IS. ']']»• destroy hil-i Intel is. always a Cotttaitief callbacl 
in f thud. 

□ 6 The doFilter method i* always a contains -Oftw» C is i B £*«tt ^Filter * Uti* 
, eattbw* tnetbtxl a J * ^° d - 

3 11. Tlic i.inly way Biter can be invoked ii through a 

cleckiiittiini in Ibe DD. ., j^, 

- * r5 w £ aiwa^ 

l>v the previous film- or in the tisb, ok Wvr e * e V, M) 

Whi. li are trm- about declitrmg ffifex* in the 00? (£cr vl t -t ,ett * b) 

(CfaoOtt all Ill-U apply- 

Q .V I.'nliki' Krvlett, filters CANNOT declare miiwlixatitut p&fanietejjJ. 

□ „ . . -OHw B " mtorreft, 

it. riitef chain order is always rieiernmir'd m the ruder the elements btfjMie <uel-p3t,"fcern> 

appear in the DD. ^ " vM ^ t ^ ti 

□ ( :. A i la- 1 1 1 : 1 1 .-Mi'inls an AI J 1 ht|ih-,i c» r response wrapper class beWe <ier*ld:~i»a»tf> 

mint fir tlcdartd in the DD. l * ,a f? ilf, 5 I - 

y using the Interceding Filter pattern, wappn A t^wii'of 

9 li, Filu r i litiin order ci nflcetcd by vyhcther IiInt mappiagii fire "tli* Detor*toT fatten, 

declared via <ur l-pattern> or via <servlet-narae> 
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Given itu' class Uwiftequesi b nn implementation of HupSei'vleikje-rjucs-L. and jfivfii thai this method 
in ewi otljerwis^ properly defined Filter implementation; 

20. public void doFilter (servletftequest req, 

£1. ServletRe spoil se response, 

22. FilterChaiti chain) 

22. throws IOKxception , ServlGtException | 

23. HttpServletRequest request - (HttpServletRequest) req; 
23. HttpSessaon session - request. getSession () ; 

25. Object user - session. getAttribute {"user"} ; 

26. if (user ?= null) i 

27. User Request ureq - new UserRequest (request , user)- ; 

28. chain, doFiltcr (uroq, response) ; 

29. ) else ( 

30. EequestDispataher rd ■= request .getRequestrjispateher (V login . jsp") ; 

31. rd. forward (request, response) ; 

32. } 

Whkh is w«? A » g^Srtl * ^ 

□ \. \n exception will always be thrown ir line :*i execute* W » 

-Option B ii thdof>-ett betake it u 

□ li. line 1& it invalid because request mu.i be passed valid a f»Ho; 4» wrap a revest 

as the first argument -^t^S^&^sS 

□ C. This lint-: chain. doFi Iter (request, response) -^j^ C ii intorvecj Wawe the 

must be inserted somewhere in i In else block. dePiltw method ij MOT retired t» 

Q I), This method dots api pfOpctly implement -~dp£idn I> is ir/atreft beejusj 

ci Iter , dvFiltet {} because ttie irioihod tnc method u^haiume it 

rigrwhtre is incurred. 

^ IL None of the above, 
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CiWt'U a |>;irli:i| dt'pli nVukmH ilt-sriijiln in 

11, <filter> 

12, <fllter-name>My Filter</filter-name> 

13 , <flltet -class >com , example -MyFil ter</fllter-clas^> 
14 . 

IS. 
16. 
17. 

ie, 

19, 
£0. 
21. 



<H1 1 e r - mapp i ng > 

<filter-najnG>My Fi lter</fD_ter-name> 
<url-pattern>/my</url-patterii> 
</fjl Let -mappings 
<servlet> 

<servlet-natne>My Setvlet</servlet-naine> 
<servlet-class>com. example .My ServleU/servlet- 



ClQS3> 

22 . </se3:vlet> 

23. <servlet-mapping> 

24. <eervlet-name>My $ervlet</sei:vlet-tiaifie> 
i l 5 . <url-pattern>/my</url -pattern^ 

26. </sej:vlet-niapping> 

WKfch is #u& (Qlwose ;dl thai apply- 

Q A. Tin; (ill- in invalid bvi :il l-v ihr l.'kl. |i; in /ray 

i-. Mi.i|i]H'd t<i l«»Ui ;» lervlct and .< Biter. 

G H. 'J 'hi* 111 e- Is invalid bec&ttfe iivilhrr the lervlel name 
jttbr the filtt-j- n, mn H allowed n itam apace* 

□ ( .!. The filtffl MyFilter will he invoked after flje 

MyServlet ii-rvlfrt Tor tuu-h ivi[Ui'sE th:ii mim-hi's 
i Ik- p;ii i crii /my 



^0f>t«Jn A is mttfrreit bc£*»se thu (• 
Proper sy^ta.* ««d fcp a filter ft 
*a.*e pitt^ a, a W*Wfci 

-Opt** B is mCorred beiawse 
there i* m ii»£H rerbfifitio»i. 



~0i*tiori C is m£ortnett betake 
filters are executed behove 
so-vleti, wt after 



53 D, Tin.- Iiltfi MyPiltor v-iJL !ii- Invoked hi't'i. i- ill- 

MyServlet -. n In II <i c.n h 1 1 i|iir«[ ilini rn.ii. In - 
i In- pattern /my 



E. The lile is invalid because tlw <filter> element must -Option it ihtorrett because 
cfjiuain .i <servlet-name> element ih.u deities etther a <servlet-nahe> element 
wliiili ,cnli'i ill. lih.-i -linuM !><• ;i| M di<-il io. 0 Ti?, <U r4?f^ e,r ' ,> "" J Y , u!t£l 



«thi-4 <-f ilter-^ rP i^ e | e « n t 
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filters and wrappers 



5 Tk 

□ li, 

□ (.'. 

aefn. 

□ i- 

□ F 



about fillers \mv n-in-'. J C'lmttct' l ■ 1 1 ihui -ipph.J 

Fillers m;<y be osed to create request of response wrappers. 

Wrappers niiiy lie used to crratr request or response filters, 

L'tilike servlels. .ill filin iiLtlLili/.nintL i.nlr ^lioiitcl bf placed iti 
the cortatrrtctpi since 1 1 n w is 1 1 ■ ■ ini t ( ) methods 

Fillers support an iiiiiudiwiiint mechanism iluii includes -m 
init{) method thai is (paranteed to be calkd before the 
lilUT used to handle request*. 

A lilt, i \ doFilter () inr-rhitd Titiisl i-;i|| dqFilter (} nn 
die. input FilterChain objeel in order to suture thai ajl 
fillers have a chant c Kt excrutr. 

When calling doFilter () »n ihc input Fil terchain. 
ii Biter a doFilter <) tiit'iliod must pass in the same 
SGrvletRoqucst uml ServletResponsa itliji-eu ilul -fft'm F is interfrrett because the 
w«:n- passed intu ii- + ,1 '^ v ***** to "way" ihe 

revest or the response object and 



-Option b it mtorrett betake 
the tev^inotoyy |S revened 

-Option C intorrett beW«*e 
there is an initO method 
that shojd be used for filter 
initial nation. 



-Option E is intorrett because 
eallin* doFdterO n not netewjry 
if a filter wiihes to blodk 
further revert processing 



G. A filler's doFilter () may block further request processing. ^ instead 



(f\PD 

^- Which itTe tnn- nbouf ihr servtct Wrapper classes? (Choose all llml apply. 1 

□ A. They provide the only mechanism fur wrapping -Option A is intovrefrt betawe you tan 

ServletRcspcmse object*, ^te *™ wrapper eW 

□ B. They can be used to decorale classes dial implement -Option B bt inicrrett because these classes 

Filter. are used 4s w^ap remits and responses 



C. They can be used even when iIu l application doea 

PH "T iupperl HTTP. 



□ I). Tin API 1 >j 1 Airier ^Tii|>pi>i\ for ServlotRjcquost. _0pW P n interred betake the 

5arvletResponse. ami FilterChain oh jet is does NOT fro"de a RtrChain wapfer 

□ K. They implement the Intercepting Rite* pattern. -Option E ii incorrect became these wapfen 

-plemcnt tbe Decorator pattern 

Q E When you subclass a wrapper class, yon must override 
at least one of the wrapper class 1 * methods. 
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14 patterns 



Enterprise Design Patterns 




Someone has done this already, ir you re just starting to develop 

web application in Java, you're lucky. Vdu gat to. exprmt the collective witdum 
of the tens of thousands of developers who've been down lhat road and got the 
t-shirl Using both J2EE-spealic and olher design patterns, you can can simplify 
your code and your life. And the most significant design pattern for web apps. 
MVC, even has a wHIy popular framework. Struts, that'll help you craft a flexible 
maintainable servlet Front Controller. You owe it to yourself to take advantage 
of everyone efee s work so that you can spend more time on the more important 
things in life (skiing, golf, salsa dancing, soccer, poker, playing the accordion. ..). 



l|i|& i& fl rtew chapter 
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official Sun exam objectives 




J2EE Patterns 



Coverage Notes: 



11,1 Given a scenario description with a list of issues, 
select the one of the following patterns that would 
solve those issues; Intercepting Filter, Model- 
View-Controller, Front Controller. Service Locator, 
Business Delegate, and Transfer Object. 



1 *L2 Match design patterns with statements 

describing potential benefits that accrue from 
the use of the pattern for any of the following 
patterns: Intercepting Filter, Mod el- View- 
Controller. Front Controller, Service Locator, 
Business Delegate, and Transfer Object. 



Thf objirtivm in tfiis section art sortwd 
ttfortpltitlj in Mm (hafitft. .Vo, makf that MORE 
tl/tm mmfilrtfly. The nam fwitiauA a» patUrm 
iiu Mir Ittnt ttid\ "I nit t/rr fniwhlr <]Uf ilium 
wu'tl irt an tilt fx<tm, in F"« rait tilmti.it rtto\ in 
this .irffioil. 

If you're almal) /nmitiar ivith Iiu fainttimtnt/it 
tntnfirist design pritlenn, vmi tun pinbaifa 
tuiKvft Hit rxtim qiifitions on pj&thU, 

Attrf afthagh Stntfi ii nnl an f fit 1 nam , this 
fhfiptfT aha ineittdts an inti&durtian to Strut \. 
fiiTTfisth thf most (ommonh'-usai JtQmriL'OTkj'or 
an MVCwb 
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patterns and struts 



Web site hardware can get complicated 



In ilu Knit W« i lil, weh afMps c?m gfti wn-upJioaietl. A pipiikii web site 
can s^'i hundreds of thousands nl hirs per clay Pi handle ■ kind of 
volume) mo$i tiifr web Tiiics create complex hardware architecture* in 
which ihc software and data is> disiribuii-d across many machines, 

A conunou architecture you're probably quite familiar with U 

■ i ii Mi £i'i i ii i ill ilit- hardware in layers or "iters" of functionality, Adding 

iin iiv computers in a tier is known m. horizontal scaling, and i.i 

considered one ol" the bcsi ways to increase throughput 



1 w« 






nab 









Client 



Client 



CI lent 



Fire wo 



Most of the 
software for a big 
web application 
lives in either the 
"Web Tier* or the 
Business Tier' . 




The "Wbb Tier" or "Pro^bi.or. Tier" 
7><s it where -the tervlets and JSPj live. 
Ai a web ute Jtk ™ort hits, ™crc serpen 
trlf be added to kindle tke lead 
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web spps 



Web application software caw get complicated 

wr\r scni, it's vary common lor a wch application lo be made up 1 ■ I 

in.-iny diH'pirnl IcinHi; nf ■iiilhv.in' r mn 11 en I fc. 'V\tc writ tit-r frrr|in»ittlv 

ruiititius H I ML p^e^jSl 1 *, servtets, l ouunlk-rs. model components, 

iiUiilif.f, iiiul .su mi. Tllr- ViLbiurx riri cm (Miill.iin 1*g4Cy ;i|h|jlM-;ili(ins. 

toofcop registries, nod in mwl cam daiiihasr drivrrs, miilI d.iuibasf-s. 
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partem* and struts 



lucky for us, m have J2EE patterns 

The gtMjd mwt fe that 0 fei pf peopU tiawe bwft asirtgJSEE 
c<ontailjera to solve iln vrry same pmhlmi* you're likely to 
encounter, Tlaey [bund reoecurtttg themei in the nature of thr 
]iiihl)|i-jii> i ti ■ ■ > wrrc tlritlinii uiih. ;nnl ihn came up with reusable 
SdiutiofiS la these problems. Thest design patterns have been 
used, tested, and relmed by other developers, so wu don't have to 
rdnyfiBt the wheel. 

Common pressures 

The nuist important job |br ;i app is (m provide 1 1 ■ ■ - end user 
with 3 reliable,, iise.lnl, correct fXperif.ticr. lit utlier wiirdta, Iln* 
program must satisfy the fttttttfanttl rr^uirrrnnih Sttch as '"select a 
I" -I ityle" or "add mall to my shopping cart"'. Oner you've made 
sure that the system supports the use cases, you'll most likely be 
faced with another set of requirements— requirements Jbr \\ bat 
happens. Mixta! the nenn. i.e. the »<W-fufl1 tii trial irquiiririciiis. 



A software design pattern 
is "a rcpcatable solution 
for a common ty- occaring 
software problem." 



What are the "Hities"? 

pen your pencil what are some of Uie important non-furiclioftal 
requirements oi a system you've wortfed on {or 
could imagine worfcinq on)? One clue is Uiat most 
of the requirements ^rds end with "ility" (for 
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the "idties 4 



Performance (and the Hit 'ml 

Hi'i't? are three of the m*J?( important mm-iututional 
reejufcesieiifc you're likely la face: 



Performance 

ll yOUT website is too slow, you'll (obviously!' lose users. 
In litis i lupter, well look at bow patterns can help an 
individual iist r exptsienec laaHer response timt!, ;iml lum 
|),iih'r ns ran Iirl|i your fulfill support a greater number 
of timull.mt imis iisfEi- Ihrimghput). iMon- <m I his when 
we disCOSta the Transfer Object 



(J) Modularity 

In order (br different pieces "I ^ovtr application to run 

on ditlerrnl boxes at ibr satin - time, your software is 
going to have to he modular... .ind modular in jtt.il tki 
right ways. 



If patterns can help 

me solve oil of these issues,. I'll be 
the hero around here. 4 fid that could lead 
to mare stock options. And when we get 
anet h ee do t e am bubb \c t h use epti'o n$ 
could actually be worth something. 



© Flexibility. Maintainability, and Extensibility 

Flexibility: You need to change your system Without 
going through wrap big development cycle. You 

might Reed tosuap ill the "limilnl Unit:, special 

■ tHi i" components fin' .i big sale. You might find a hug 
in .i rjevi ['oiii]hiu< j ii( and need to-swap in the oldrr 

i i unpi nif nr n-mpoiarik. Vim need wuir tiystrm to be 
llexible. 

Maintainability: You might ihtl! m I'hartge database 
vendiii-v. fffld Update your systcin oijicjijy You mud it 
get obscure hugs and need to track diem down ASAP. 
The admins miglii decide lo restructure the company's 
naming service, and you'll have to adjust — right now! 
You need your system to be maintainable. 

Extensibility: The guys over in marketing might need 
anew feature to land (hat big client. Your users might 
ill ii.ii ii I 1 1 mi yon support a brand Hew Feature thai their 
browsers have. Your tysttrtti had better he e\tnisih!e.l 



I 
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Aligning our vernaculars... 

. \ J I I lie }^\'A'. paileruH trlf llraVlly Bfl t'7 .ill i Hi i| i 6>o|VWltrG 

design principle-* you're probably wry familiar with; In 
r h*' m-xt fewjjs^es, we flini; wound several tcrtnj for these 
design principles. Diflrrrnl proplr and books might have 
different perspectives on the same terms, so wcYc giving you 
our definitions now, so that you'll know what we mean. 

Code to interfaces 

As ynu recall, at) interface i.-, a kind nf 3 comj-ai-t butwt>ori two 
ubjucLv. \\ 1 1 1 - n 1 .1 1 1 : l >s implements an interface, it!* saying in 
effect; "M$ object! can speak yir language," Another huge 

liniclil rj|' interlaces is polymorphism Miiny daisies can 
implement the same interlace. The calling object doesn't 
care who it's talking to a* long as the contract is upheld. For 
example the wet container qfln use any component that 
iinplementji tbe Sm'H interface. 



Separation of Concerns & Cohesion 

We all know dial when we Specialize lln.- capabilities of our 
software components, ihcy get easier to create maintain, 
and reuse. A natural fallout of separating concerns is that 

Liphi-jsiujl ' 1 1 m I ■■ I- 1 i ( ii 'ln sini 1 me. in-, llh ili ' ■ In 

whicli ;i i l.i^ designed lor one, inhi'Mrf. task (if pilrpi i.se. 



Hide Complexity 

HiiliiiLi inmplcxity often goes hand iti hand xvitti teparating 
concerns. F*ir ttutiiiice if voin- ^^irm needs in coji'iiihiiiic. ki- 
with a lookup Hcrviee, it's bCSI W hide the complexity 1 of thai 
operation in a single component, and allow all the olhcr 
component* thai need access to the lookup service to use 
that specialized component. This approach simplifies all of 
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00 design principles 



More design principles,., 

Loose Coupling 

B> (lidr very nature, OO systems involve objects miking la each other. 
By roding to ihtcrfacei, you ran reduce the number of things that on* 
class needs to know about another class tn communicate with it. The 
les.* two clause* know about each ntfier, the rnoiv loosely eutjpU-d 
they are to each other, A very common approach when class A wants 
to iite method; in clan B is to create an interlace between Ihe. two, 

Once class B ittipletaeiiii in i-hiss A cm »»■ el.iss I! vi.i die 
interlace, This is useful. bec«U4C later on you can Use an updated class 
B or even an entirely different class, as long at il upholds the contract 
i il i he interface. 




IiiiLiv. when :t web site grtsw>i, the answer is lo IjhIi together more 
servers, as opposed to upgrading a single, huge, monolithic server. 
Hie outcome is that Java objects an different machines, in their own 

separate heap*, have to communicate wfth each other. 

Leve raiding the power of mter&cesj a remote proxy is" an object local 
to the "client ' object ihat pifitnifs to be a remote object. (The proxy 
is reunite iu (hat ir is remote from the object it is emulating.} The 
clieni object communicates with (he proxy, and the proxy handles 
all the networking COmplexitie* of communicatim? with the actual 
"service** objecl. As far as the client object is concerned. it?i talking 60 
a local object. 



Increase Declarative Control 

lice laxative control over applications in a powerful feature of 
|2EE ( ■"hi, liners. Most commonly, 1 1 ■ 1 - ■ dechvatiye control is 
implemented using the application'* deploymetri descriptor (or 
DDi- Modifying the DD gives us the power to change system 
heli.ivioi KMlhoiH ' lianniim code. The Dl ) ]H an XML I lie- ilia 1 HI 
bo maintained and Updated by non-programmers. The more I hat 
we write our web applications to leverage the power ol' the D1J, die 
more abstrari and geoen* our code becomes. 
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partem* and struts 

Patterns to support remote model components 

We've calked Lit a tsety theoretical level about IvwJilliK patiftns i.:a« help simplify 1 
complex web appliintinns. We've aho talked aboui the sfifnvarr design prinnplei 
1 1 1 : h i underlie J2EE patterns. Willi thai foutudatien in phtee. btfs gs< our leei ivei 
by talking about .1 leu of the simple r,|2EE patterns. AJI three ot the patterns we're 
about to discuis share I he goal of making remote mei/r! components manageable, 

A Fabl^ The Beer App Grows 

Once upon a time iht-rr wan a small d»1 com thai had website that nQered 

In ime hiewinu, ]<-< i|irs. <ii|viie, ingredients ;md supplies for beer aficionados. 
Being a small company (with big plans}, they had only one production semer to 
support the site, but thry hud created two separate software development learns 
in nitiw the application. The Of 31 ir:itu, known as the "Web lie signers"' forused 
ilieir attentions mi thf rinr component* uf the system. Thf second [earn! 
known as tin- "Business Team" focused on the imtmtltr component ■ R.n lu-|\ 
fonts), and tin- mmfrl component* <Kim'* WTCa), 

/ Performance >i 
J is really beeeming a big issue. ) 

We've 90+ a .smell budget for 
hardware now, but I Smew we'll hove to | 
bE ready 1a split erf -f more p'eecs of / 
tke opp when the time comes ^/ 

O 

o 

■ * 

i 

ftachel and Krm, 
the Business Team 
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MVC when everything is focal 



How the business Team supports the 

web designers when the MV0 components are 

running on one JVM 

As long as the business ifuys keep thr interfaces to their moclrl components 
etinnistent, everyone will be happy. The two key interface points in their 

dc^i^n are when the loutml/n lh>i interactis with a modtl corhponent istep* I 
and 2 below , and then taiefi wfceri aJSP gfoi interacts with the Ittfafl it b'j eds 
>n-ps 3 and 4 below). 

Getting customer data for a client... 

TV* dent' i 'yiCujte«*erDjla J ' rt^st 
bemj *nt to the »cdd RKhtl'* *«d 
it O tVm <r.4evfett to be stable 




Model 



Legacy 
Database 




fTijiforri«r 
Bean 



hot in £J0. 



Web designers hong 
out here... 



Kim s fcesponsibilty 



Hie JSP MtI ^i, to 
atiess ^Ke CwWer 
Beah yrcfertia The w b 
designer 'j « e d j, -fer^y, 
inWto ^ be ftible- 



1 Having recewed a request 
for customer information, 
Hie Controller calls the 
ManageCtistomer service 
component (a Model). The servtce 
component does a J DSC call to 
the legacy database, then creates 
a Customer bean ((his is NOT an 
EJB. just a plain old Java Bean), 
populated with customer data from 
the database. 

2 The Controller adds the 
Customer bean reference to the 
request object, as an attribute 

3 Tne Controller forwards to 
the View JSP, The JSP gels the 
reference to ihe Customer bean 
from the request object. 

4 The View JSP uses EL (o get 
the Customer Bean properties 

it needs to satisfy the original 
request 
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How will they handle remote objects? 



I lium-, iiiv fairly simple whim all thf- well app i-niupoiiviits 
ihchIi'I. view, controflei arc on the same icrver; running in 
the same JVM. It'sju*! plain old Java gel a refwenc*; eafi a 
in. 'i in. ,1 |im Km- .mil U 11 ln'1 ..• .. h.n 1 ... I'mnr.- ■ nn ^ li.ii 1.. 
do when (heir model components Bit! remote to die web app, 



JNDI and RMI, a quick overview 

Jiiva and J2EE provide mechanism* dial handle two of the 

lUii^l . iiinitu >li 1 III In II Jr |r- 1 hi' .i.-i-i I ,. i) 11I ■ j ■ , 1 ■ Itn . ' 1.. 

ccminiunicatL' across a network toeatittg remote objects, 
and handlirtp; all « I a ■ - Ion level network/JO frtm*Muitt*M*Kfn* 
Ih'I\vc*'ii local .mil [r-nniir ■ il ) j<-< e s. 1 In oilier words, how ir> 
Jjmittsnuftt objects, and Imw Un niralf iln-ir methods,! 



JNDI in * nut$h$fl 

JNDI itandu for Java Naming and Difftctafj Interface, 
unci it's OQ API in access naming and directory service*. 
JNDI inves :t network n t^en trail zed location Lo lind 
things. 11" you've got objects that you waul other 

pi- n;i .1111-- . hi \ i> Him kin tin.) . 1 1 j ■ I 1. . i--. '. iiii 

register your objects with JNM. When some othi 1 

|iloM|.iiii uat|l> lo yulH oUjeHy. thai program H« J " 

|M din look dn-iii up. 

|X1)I makes n-liH-Liiintf rinnponniis mi your network 
earicr. Din e you've relocated a componem, all you need 

trl fill is tell j\l>I Nil" IH'W |i>i .limn I lull way other 
irltml component only need to know how Lo ttntl JNDI. 
without knowing where the object* registered with JNDI 
:im- mutually Uncled. 

Rm in 3 nufsheJf 

RM1 s lands lor Remote Method [miration, a 
mechanism that greatly simplifies, the process of getting 
object* to romtminiL'att? across a network. Turn the page 
and well do a quick refresh* m case yWre a little ruity 
Why diink alxmi RMI ln-re* Because it will help make 
two of tfwrJJEE design pattern* master io understand mid 
appreciate, 




II 
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RMt overview 



RM1 makes life easy 



You want yotU object* to < ODnmUlUCate across a network- lu other word*; you want an object in 
one JVM t<> oust? ;i method invocation mi a rtmoic ohjet-i (i.e. ;ui nhjeti in a d^jrijf.fVM;, btil 
you Waal to prttftid that you're invoking ;i iwiliod on a /rWnltjeci. Thai's what RM] gives you 
tin- abilk) m pretend (almost) thai you're making a regular old local method catt 

What we want.. 




How RM! pulls It off 



Client 




Object 



s;iV Voln "ljiliiiirs* iiuy" li.il is im, LiEitl VulL Want In make ail iiliji't l available to N-motC 

clients. Using RMI, ymt'll Create n proxy ami yoiiTt register y«ur objeel wiili some son of 
registry; Any client who wants to call your Methods will d<i a lookup on the registry ;ind get B 
copy of the remote jpracrp, Then die client will make calls tm the rem me piow. pre-lertding it's 
the real thing, 1 In- remtite umjty i called a stiibi- handles all the ixinnimnicatiuns details like 
sin'lceis, 1/fJ streams, '1'ClVJll serializing and deserializing method argiiroiBtitB and return 
valine, handling exception*, and *r> forth; 

[Ohj by the way, there's usually ;i prosy on the servee aide (often called a ""skeleton"), doing 
similnr chines on [hr server side where llir rrinnre rjhieeT lives 1 

. ~- r ■ -■ -i' 



An ftMl miracle occurs.. 
getCusTDataf) 




1 he- chant machine 



TKe "remote 



The server machine 



T\etc ire i versions 

The remote prwyir 
the skeleton'* and 
tK< server's, whith 
ii iW real one 
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Just a little more RMl review 

Without dotae an entiw RMl tutorntt^ we'll ktok&t a t<-u mow Nigh tawl 
RMT topics to make sure wr-'it? fall talking tin: same talk. Specifically, well 
look at die server side and client side of "i^in^ RMl, 

RMl on the Server side in 4 steps 

(An overview of the sleps to make a remote model 
service that runs on the server) 

Crriilc .1 mrrmtf interfaru. I 'hi* is U line [lie ■itjrii.'jmrr fi tr Kid I rods 

ii : k<' s «ir.MHtDiit S i() uiii pside. Both the *tub pros^ .mil the actual 
mode] service (tie remote object) Will Liiiijtiwiu this icm-rfuee. 

Create tin 1 remote implementation, in tnln-i- wunh. ilu- 
actual model object that will reside on the model server. This 
includes code that registers the model with a well-known 
sen ice such reJND] 01 the Rill ivifissii v. 

Generatr list- siuh arid '.possibly,! skeleton. RMl provides a compiler 
called rmic ili.it will cpfcaw the proxies far you. 

Start /run the model service (which wiD register itself wiih the 
FcgUtry and wait tor calk fotita liir-away clients!. 



The client side, with and without RMl 

Iji't's compare the psetidc-eodie of a cheni using RMl to the 
psi-udo-t-udc of a client NOT using RMl, 



The client without RMl 

fmbl 1 r Wfrlrl rind 1 f prr ( t t 
try | 

U get a new Socket 

// gat an Outputstre^n 

// chain it to an ObjectOutputStream 

// send an opcode & op arguments 
// flush OS 

// get the Input St ream 

)l chain it to an Ob jectlnputStrcam 

ii read the return value and/or 
// handle exceptions 

// close stuff 

I // catch and handle remote exceptions 



The client with RMl 

pub I i r. vniri gnHlifintft I 

try * 

it lookup the remote object, (stub) 
// call the remote objert-'s method 
1 11 catch and handle remote exception* 

I 

"II you aren't really familiar with RMl, drive :o you- oca! bookstare. 
pick up [but don't buy) a copy of Head First Java, and hjs! read 
the sections on RMl Then put ths book back on the shelf, face 
forward, in frtmr of the competing book of your chciw, Make 
sure that ths cover is dusted and don't spill coffee on it 
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using a remote ;■ 



Adding RMl and JNPl to the controller 

Ue.i'i focUS ihi what we need tO d<> to keep Rachel'* lift- ;is ttmpifi 
as possible: In other worfk whui impLim dors adding JN131 and 
RMI have ea ihr eonlBSlifit? 



3 steps to using a remote object 

(J) Kins, the mraife) p y. *j^(sra his m < xl? | 
< om|»tnH'iii iviili tin- J,VD/ H«rvice. 
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Sure, 'l-..: .-nethcc cdfs are pretty 

model was local, but I still have to change 
the Controller code to put in the whoFe JNDl 
lookup. I was hoping far something that woufd 
let me use the same Controller regardless of 
whether the model is local or remote. 




pen your pencil 




How can this design 
be improved? 

1 - What are the problems with irus design (lisiatiea&t two}? 

2 - How might you change this design to handle those problems? 



II 



Problems." 



Solution: 
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hiding JNDI lookups 



How about a "go-between" object? 

A common golotittn ta th* design problem* we left you with I'- 
ll! itcmil' ;i new nhjeet ;i single, "iru-lietivwn 11 object fur die. 
controller ks tadEk to rather dura having 'lit- controller deal dirccdy 
will] the mnr,((w>\ of the remote oiodtL 

Problem 1: Hide the complex JNDI lookup 

II KiirlicTs controller lets a "tfo-bcewecn" object bundle theJNDI 
lookup, the controller code can stay simpler, tree from having to 
know where (and how) lo look up the modil. 

Problem 2: Hide "remoteness complexity" 

II' the "iji.>- between" nhjerl can basdlc liilkiun i<i (he stub, 
Rachels' controller L'iin be shielded lirom till die remote Issues 

including remote rxctptutiti. 




View 
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The "go-between" is a Pusiness delegate 

I ,.-f-< take a bat ;if f&e pstwJo-^e r<*i a typical Business Delegate and 
;is bow Bisfitesi Delegates (end to lie- deployed in the web coiUEitnor. 

Notice ihai there w]\] he LOTS of Rwfaesn Delegate* on the web ifct 
A Business Delegate's pseudo-code 

// get the request and do a JNDI lookup 
// get back a stub 

// call to the business method 

// handle 6 abstract any remote exceptions 

// send the return value to the controller 




(Describe where the dupjicate 
code exists and how you 
could solve that problem.) 
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service locator 



Simplify your Business Negates 
with the Service Locator 



Unless your Business; DHrtjaies ust* a Service Locator; iln-% 
will have duplicate code fos dealing with the lookup icrvice. 

To implement a Servk-r Locator, v\t-'|l laki- all of (In - k>gi<: 
fordoing iheJNDI linkup and move il nut of I lie multiple 
Business Delegates and fafr a single Service Locator. 

Typically inj2EE applications, there will be n number of 
components that all use the sameJNDl service. While ll 
i omplex application might use several different registries 
sueli asJMU mid L'lJOJ (fin' urb Bjervice enopoitit^i an 
iiuiinilail uwifnmnil will upiinlly need iiccfss to only «w 
registry In general, a sinirlr Service Locator wffl support a 
1 in uli*. spevifir registry, 

By making the Business Delegate lifl obje i thai tomdles 

Mil)' thf buxtnrrts in.'tiimk rather thfltl rf/.ia llii ndling the 

rcnisiiA lookup Bode, von increase dir- eohesiofl for foe 
Business Delegates, 



A Service Locator's 
pseudo-code 

// obtain an InitialContext object 

// per farm remote l6okap 

// handle remote issues 

// optionally, cache references 



Cohtii-on 11 mtrea*ed 
for all of thee 



L Vi_ 'Jl#rl Uv -I 
nvw <whuilk -j I* 

Eervite L*eatw- AH 
He Delete to 
h> do 11 deal witVi 
» •: - -wtthedi «i 
the rUb 




Justness 
Delegate 



Serves 
Loi rttor' 

Cac he 



jVJc*e$ the wty^y affeeb onty 

the ftjfe Serv-ti Utaiw objeit 



rvak tithe tah 
redvie network W»s 
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G^* This whole discussion hat assumed RML what if 
our company is using CORBA7 

A: 

l\ All of the patterns we're discussing can be 
implemented more or less independently of J3EE 
technologies. Admittedly, they will be easiest to 
implement in J2EE. but they d o apply toother situation sr 



A 



" Is the same thing true for JNDI? 



Well, there cJrtr other Java- related registries 
besides JN Dl— RMI and J in i come to mind. Of th ose 
three, JNDI is probably The best choice for mas I web 
jpps, it's easy and powerful, (Although the authors 
wuuld petionatty love to see Jini take its rightful place in 
the distributed world.) You might also be dealing with 
non-Java registries like UODI- in any case, the pcWerm 
will still work, even though the code changes, of course. 

^i, It seems like these patterns are forever adding 

a new layer of objects to the architecture. Why is this 
approach so common? 

A: 

_[\ You're right that this is a common part of a lot 
of palterm. A*iuming that yourdeaign ijgaod, think 
about the software design benefits inherent in this 
approach,,. 



OK, well, cohesion comes to mind.,. 



A- 

t\ Right! Both the Business Petegate and the 
Service Locator increase the cohesivenesi ut the 
objects they support. Another driving force is network 
transparency. Adding a layer often shields existing 
objects from being network aware. Then of course 
Lluitily r plated Id cohesion r, separation of concerns. 



Separation of concerns buys me.. .7 



A: 

x\* Let's take the Service Locator as an example, in 
the event that your registry gets a new network address 
and/or registry interface, it's far easier to modify a single 
^ervire Locator than change a whole fSoi ill.i of Business 
Delegates. In general, separation of concerns buys us a 
lot of flexibility and maintainability. 

In your examples so far, you've taken POJOs 
that were Joe a), and made them remote. Isn't it more 
likely that HI be faced with integrating existing EJBs 
into my web app? 

A: 

jfl By POiQs, we assume you mean "Plain Did 
Java Objects', of course. And yes, it is likely (hat you'll 
be integrating EJBs into your app. And in fact that's 
yel another reason to use these two patterns.,, your 
controller (and view) should never have to care whether 
the model is a local JavaBean, a remote POJO, or an 
enferprrse JavaBean (EJB). Without using ServiceLocator 
and Business Delegate, that difference means- a lot — 
enterprise beans and plain old remote objects don't use 
the same lookup codeJ 

Usrng these patterns, yo-u can encapsulate the issues 
related to how and where the model is discovered and 
Usecl.ond keeplhe controller hoppy and tluelejj, 50 

that you won't have to change your controller code 
when the business guys change things and move things 
around on the business Her, You'll update only (he 
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the JSP and remoteness 

Protecting the web designer's JSPs 
f rom remote model complexity 

By i initio ihr Biin-iiu'SK Delegate and Service Locator pattern^, 
we've got Riii lid's controtlcri protected from the complexities of 
remote model components. Now let's sec ii' w<: can do llic same 
[or the; web designer's JSPs. 

Quick review of the eld non-remote way— the 
JSP uses EL to get info from the local model. 

This diagram thou Id luuk fiimilr-ir I'mm trarlicr in llic chapter 
Thi' JSP gets ihc bean reference! from the rcqucai object (step i), 
then calls getters on the benu {step 4). 



1 Having received a request 
for customer information , 
the Controller calls he 
Managed] stomer model 
component. The model 
component does a remote call 
lo the legacy database, then 
creates a Customer bean, 
populated with customer date 
from trie database 

2 The Controller adtfslhe 
Customer reference lo the 
request, as an attribute 

3 The controller forward s lo 
IheVfewJSP. The JSPgel&a 
reference to the Customer bean 
from trie request objecL 

4 The View JSP uses EL 
lo get the Customer Bean 
properties it needs to satisfy the 
original request. 



Model 




EL e*rve«ior* likr 

$ { customer .name] 
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Compare the local model diagram to 
this remote model diagram 

The ihaded area in ihi* didgram slumM tixika 
LO T lifcr die previous diagram, especially if xmi 
ri'im'iinbcr lliat lln- Business Delegate it- pii'lc-ndmii 
to bt' tbi Manage Customer mudeL 



Customer 





Legacy 
Database 



A 6-step review: 

1 Register your services wltti JNDt 

2 Use Susines Delegate and Service Locator to get 
the Manage Customer stub from JNDI. 

3 Use ttie Business Delegate and lire stub to get the 
"Customer Bean r , which in this case is another stub. 
Relum this stub's reference to the controller 



A Add Hie- Customer stub reference to the request. 

5 The COnLroller towards to the View JSP The JSP 
gets a reference to the Customer bean {stub) from the 

6 The Vie*' JSP uses EL to gel Hie Customer Bean 
properlfes it needs to salrsty the anginal request. 

BIG NOTE: Every time the JSP invokes a getter, 
the Customer stub makes a network call. 
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JSPs and remote beans 



There's good news and bad news,,. 

The preview? arthitecwre suceeedj in hiding t-uwpiYxity front both iiu 

i ' ilkn and the .] Si's. And ii makes gyxjd use nf ihr Bufliness Delegate and 

Service Locator juttieriis. 

The bad news: 

When it's time 1<» the JSP to rel dam, ihiTr ;uc iwn |jM>hlt-im. Imth related m 1 1 1 ■ 
Ian thai the beafl l!n: JSP is drain Eg with is actysHy » JdM to a nnwtf objsd, 

I - j4// lAfiAV? fine-groined netvLwk rails an: likely la fie U big prrfarnianee hit. 

Think ;iL»hii ii. Ea<.l» F,L expression trigger) a rcmoie method bivocation. Not tally 
is iliis a bandwidth /taiem-v issue, but all thow calla cause- the ttttypt WW jwoMcoij 

too, Each call might lead to a separate transaction and database load (and possibly 
store!) on the server. 

1 - Th* JSP is NOT a S <hhI plate ta be han dling exceptions I lial in is>| il ( hhiI j' ii I Ii i ■ 

miHUr scrvn- crazies, 

Why not have the JSP talk to a plain old bean 
instead of a stub? 



0: 

If you want The JSP to talk to a JavaBeart, where 
will this bean come from? 

A: 

fc\ Well, it used to come from t h e i bh I m od el/ serv ice 
object, jo why not have it come from the remote model/ 
service object? 



How do you get a bean across the network? 

J^" Hey, as iong as it's serial izable, RMf has no problem 
sending an object across the network. 



&o what would this buy us again? 



A: 

t\ First of all, we'd have one big network call instead of 
a lot of little ones. Second, since the JSP would be talking 
to a local object there'd be no remote exceptions to worry 
iibuut! 



x Wa if a minute... I see a I ittle problem here. 0 r 
maybe a big problem — if you're using a bean on the 
cl Sent side, d aesh t that bea n s d ata become sta le the 
moment it's sent? 

A: 

£\ Yes, you're right, and this IS a trade-off.: 
performance vs. how current the data is, You have to 
decide which makes sense based on your requirements. If 
the data used by your view component must absolutely, 
pos-iriveJy, represent the current stale of the database at 
ajj tfn^^ th^n ynsj ^ r^rnot? r^f^renc^ 1 . For ?X3mp!?, 
ir you make three calls, say, getNamef), getAddressO, and 
getPhoned on customer, you'll probably decide that this 
information doesn't change rapidly enough to make it 
worth going back to the database fvia the remote object) 
Just incase the eti&tomer'i phone number changed IN 
BETWeEN the call to getNamef) and cjetAddressO. 

On the other hand, you might decide that m a highly 
dynamic environment, where a customer is making 
transactions 24/?, you DO need to show the most up-to- 
date info. Sending a JavaBean back for the client means 
the View would have a snapshot of the database at the 
moment the bean was populated, but since the bean has 
no connection to the database, the data begins to go stale 
immediately. 
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Tim for a Transfer Object? 



If ifs liki-ly thai a buiinefi service rfltghl !)<■ ;iskt'il to send or I'frcive or moat of 
its data in ;i big, cooriir-grainecl message. it 1 * GoiBTnon Rji thai service to provide 
thai feature in its AIM. Commonly; thr business (jervit* create* ;t serhilizablejava 
object that contains Iob of huiauce wuittblififc Sun oils this object a Transfer 
Object, Outside of bun there is a pattern c fill eel Data Transfer Object, < iuess whirl;' 
ThuyYt' the same thing 1 . lYeah, ive feel the same way abtiut lhaLi 




Business 
Delegate 



Manage 
Stub 



<-- 



_J 




Serialized 
Transfer 

ObjECt 



Remote 
Server 



Manage 
Customer 



The client's perspective, inside 
the Business Delegate: 



createCust ( J 
i • - 

getCiistDfita ( I 



Customer 5 - custStub . getCus tData (cuat I I"-) ; 
throw new CustomQtExceptionO 

J 



Cd^h rftwie e«ef tc*i j«d weap 
the* m a h^hor f<v e | fcttepti*, 



.IJICI a, UlC £1*1JI>LVI Jit-Li 1^- JLI 1*1.1 .JJVTLJ T 



i,;^.-..,-r , L . -I 

>I1L£J|JL'I V. lILI" ■ 



■ I. set iali/.rthiii in the .client** lu*'*i|JVM heap, At thai point, it frjfat lite 8Ji>' 
other local bean. 



The data In a Transfer 
Object grows stale* 

■ s shipped across (rre netiwric, tfw Transfer 

SSSitfn? » «' ti of sync «dtf. in, rtf. 0 the 

£££ tor each Sg. f^^ff 
synchronization is mtih the performance Ms. 
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service /oca tor vs. fiusiness delegate 



Service Locator and Pusifless Pelegale 
both simplify model components 



SeMee 
Locator 




Service Locator i* the sit|j<-rkn pattern. First of -ill. 
unlike the Business Delegate, one Service ham/tor 
instance cati snppirt an entire application tiejr. 



Service Locator is more efficient with network catts, 
ll can cache references to Stub* cir service sluhs once 
it ha, located them, red ucin R network 
subsequent r til Ls. 



rfeav- I h n <3h-i i H Vour simple business data does noi 

impress Mir. 



Ah. maybe program mer* do benefit, but your simple 
pattern seems to IbrgcL that h oitcn exists in a netifork 
cnvii iinruent. It will snnko mnny 4: nib to busiritaa 

services with tut restraint, ao conwderatioo Ibr die 

OEtrhetul of remote cjjIIs. 



Yen. yes your Weak pattern needs ttSiisUtHCt, Wf all 
know that. But when yt>1t partner with a Transfer 
Ohjeet other demons can haunt you... you haven't 
hn'ULitic-n youi linli pinMcm:* i wih ilat.i -.tali m-^ . 1 n • I 
coiicnrretiey, have yon? 



iir/™ rrr as our two black- htits dfhatt whifh 
ptiitrm a heller — Semite Locator or Busin/si 



Business 
Delegate 




That's true, hut Service Locator needs to talk to only 
one remote entity. Business Delegate must handle iFttBy 
entity objet Is. 



\Vitl» much resiperi, you are tin-tretiing thai 
Service Locator lias a much easier task. The 
lln^iin-s^ Dr leuate must CMS) lhe heavy burden of 
communicating with .1 dynamic object, whew data 
ought change at any moment. 

A ftut&M&i Delt gate gives web applicalion 
programmers much more htmfi! than your Service 
Locator. 



Ah hit! The Business Delegate b urn ashamed iu 
form an alliance with the Transfer Ohjeet! Working 
ana team, they help ihc | it 1 i^>i :itii«tji 1 AM) niiiiiiiii/.i- 
remote e.ill- 



Nn. I haven't forgotten, But when these «snei »mit 
up the) can be solved You cannot catp*C* to achieve 
great things without a link* extra effort.^ nothing in 
J ZEE is ever black and white, 
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Pusiness tier patterns: quick review 

Tii wtsp up our d&cttastan of tnutiiwts tie* pattern*, here's a 
cliitpfi'^m that shows a Bu.HinfMi DHeffsn*, •) Service lwfi&&xt\, 
and ;* Transfer Objed in anion. At i*ihI of die ehapwr 
you'll Bind B COUplc <)!' nutUOary pages (far thrsr pHllt-nis and 
the presentation licr patterns we'll discuss next, 



Manage 




Customer 




JNDI 
Server 



Manage 

<T.'i.i Storing 





Models 




v 

[ Servic ft) 




(Sftrvlfiftj 


Manage 
Customer 


f Entt<yJ 

Custoin-er 


Manage 
Orders 



A 6-step review: 

2 Use Business Delegate and Sen/ice 
Locator to get the Manage Customer stub 
from JNDI. 

3 Use the Business Delegate and Ihe 
stub to gel the "Customer Bean', which 
in ihrs case is a Transfer Object Return 
this Transfer Object's reference to Ihe 
controller. 




■ g 

Legacy 
Database 



5 The controller forwards to the View JSP 
The JSP {jess the reference to she Customer 
Transfer Object bean from the request object 

6 The View JSP uses EL to get the Customer 
Transfer Object Bean's properties it needs to 
satisfy ihe original request 
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MVC 



Our very first pattern revisited,,, MVC 

A* luck would h.w> ii. ilu' vriy mime pattern we*V* been using in 
r tit- book is on the exam* The last two patterns we're covering 
ape p*e»ent8tteia tier pattemu; as was ilu - tnteft'epttng I r ilk j r, 
Rest wc*U pick up where we Irl'i oil talking aboui MVG« Thai 
discussion will lead u& into Struts L-uid finally Front ControGrr< 

Where we left off.,. 

Lets do a quick review of whevc 

tti' Sell ni'l' in i h.ipli'i 1'. 



MODEL 

Helds the real business logic and the 
state. In other words, it knows the 
rules for getting and updating state, 

A Shopping Cart's contents (ond the 
rules for what to do with it) would be 
part of the Model in MVC 

It's the only part of the application 
that talks 1 



CONTROLLER 

Takes user input from the request 
and figures out what it means ta 
the model. 

Telia the model to update itself, 
makes the model state available 
for the view (The JSP) and 
forwards to the JSP 




View 

VIEW 

ftesponsible for the presentation. It 
gets the state of the mc-del from the 
Controller (although not directly; the 
Controller puts the model data in a 
place where the View can find it). 



Off Track GUI MVC vs Web MVC 

MVG insisted before the World Wide Web 
i .mil' along* In iis fhwl incarnation, MVi w& 
li design id Miiij'iiify ratfffuleS C!i ! oppliC3tuori& l 
Fits! created In -Sin,illuilk, otte of MVCs chief 
iittrihutrn wn*i dial the View w<mld he notified 
automatically of changes to the Model. 

More recently MVC! Ii;i>> been used on 1 1 1 ■ 
ivrli, ftveift though tin- View is in ihc Iirows.er 
and caxuiol be automatically updated when the 

Modd changes in the Web licr, Our focus is 
entirely on the web version « . t MVC 

Finally, we're always talking about MVC t 
model 2, never the older Model I ur 1.5 
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MVCmarealwebapp 



Way hink in chapter two, wc leli vwj with ;i "Flex your Bund exercise about potential 
problems with oui Dating App MVO architecture. Left review where we fefl oif and 
gej aniuml to answering iIk- ejuestiot] i hat's I'mainly been haunting you for all ihese 
chaptm: wbn could possibly be belter ilian MVOV 

For each browser use case, there wiD b*- a corresponding *e4 of Model, Vie*4 surf 
Gtuiimllcr component!), which nu<fhi br mixed dad matched ;md rpcombmsd in many 
diH'crew ways hum use case to uses each 

The problem we hud in the dating app was thai we had tnany specialized controll- 1 ■.. 
which sounded good from an OO perspective, but left us with duplicate code across 
all the different controllers in our app, and didn't give us a nice happy feeling ahoul 
[ii;im[;nn;iliili|i, ,irnl I]r\i1ii]iiy. 

A single MVC app will have many models, views, and controllers. 



Use cases 
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the MVC controJter 



Looking at the MVC controller 

Lffmt;*! if we agree u|uil\ t>o«n ul>r»iit riwiinillns. Hr>l, 
a remtBider about the controller st-rvlri's job: 



Pseudo-code for a generic MVC controller 

public class Controller&ervlet extends iittpServlet 
public void doPost (request, response) I 

II do a data conversion on the date parameter 

// validate that date is in rstiqe 

// if any errors happen in Validation, 
// forward to hardcoded "retry" JSP 

// invoke the hardcoded model component is) 

// add model results to the request ob] . 
// (maybe a reference to a bean) 



Deal with the 
request parameters 



Deal with the model 



// dispatch to the view JSP 
ft <nf course it's hard coded) 



Deal with the view 



^3srpen your pencil 

' 1 What principles does this 

component violate? 

List three or more software design principles 
this pseudo-code violates. 
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Improving the MVC controllers 

Hositles a lack of cobeslveoesjj ihc controOer is ated tightly 
coupled hi i\u- model and ih<- wfcw components, And tfcereVyet 
.iritiiluT Duplicate God* Aim here, How pas we fix tilings? 





The controller's 
three main tasks 


A better way to 
handle it? 


© 


Get and deal with the 
request parameters 


Give this task to a separate form validation component that can get 
(he form parameters, convert them, validate them, handle validation 
errors, and create an object to hold the parameter vafues. 


® 


Invoke the model 


Hmmm... we don't like hard-coding the model into the controller, so- 
may he we could do it declarativety. listing a bunch of models in our 
own custom deployment descriptor that the controller could read 
and. based on the request, figure out which models) to use. 


® 


Dispatch to the View 


Why not make this declarative as well? That way, based on the 
request URL, the controller can tell (from our custom deployment 
descriptor) which view to dispatch to. 



New atid (shorter) controller pseudo-code 

public class Control lerServ]<=t extends HttpServlet [ 

public void doPost (rerjuest, response) | 

// call a validation component declaratively 
H (have it handle validation errors too!] 

it dsclaratively lnvujte a request processing 
// component, to call a Model component 

// dispatch to the view JSP declaratively 

1 

I 
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designing a controller 



designing our fantasy controller 

Let'$ rl<j another one of outr nownhlamous 

jin ltih i l 1 1 r: 1 1 cli;i^rr;in>< In t&fi uli;iF litis conliollrr 

and us. support components might t<">k like. 




Declare 
Mappings 
XML 



Request 



Controller 



1 Having received a re<|utsi the Controller 
locates Ihe correct Form Validation 
Component In the Declarations XML file. The 
Controller invokes (he Form validator, sending H 
the request If the validator finds any errors it 
(ells the controller which view to mm 

2 Using the Declarations XML file , the 
Controller locates and invokes the Request 
Action Component component, Which invokes 
the rnodei 

3 Using the Declarations XML Die. the 
Controller locates and invokes the view. 



Form 
Validation 
Component 



o 

RlequEst 
Action 
Component 




View 




Model 




Controller 
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Yes! It's Struts in a nutshell 



< )hviously dm is U41 overview, and Wtfyl! Iflt (MM pretty KtUeh 

all of ihr details, hut dii* is the basic idea behind ilsr Sums 
framoverfe. Lets look at a few mote details, starting with die 
I-k i thai we've changed nil the names... 



O 

Request 




Action 
Sen/let 



.4 ■ tiOi 

Object 



Key Struts Components 

Action Servlet - You'll need only one ol ilu->i- ])ei application. 
Best of all, Trtti don't twii have to write it. Struts provide- it 

Form Beam - You'll write one of these for each HTML form 
your .irjp needs to process, They arejava beans, and once die Struts 
Action Smit t has rallt-d the setters mi the Itinu [to populate 
illf lie;in xh" i i [ I lorril f»ai:inii L iei s i, li Will t n}\ bran i v.imhueu 
method This is a ^renl place to put d;t(,i twiversHHi and error 

handling logic* 

Action Objects* ■ I Ij-m<-i ally, an anion mapl to a stnj^li 1 artiviK In 
a itii-tiWc, It has & caD-bocV-Eke method called cxtfi:ui«{). ulm h 
is a great place tQ£*< die validated form paramo and call nun lei 
components. Think of die Aeti<ui object afi kind of a ServiH litr". 

strytHi-cimfig.xntJ - This Is the Stott^spetifit deployment 
descriptor. In it yottU map: rcniuest lTRI>i to Actions Actions 
to Form beams. ,md Actions to views. 




View 



the Struts framework 



Is Struts a conf airier? 



Framewaj&s. are collections nf interfaces and classes i\r.n 

.in- (It sijTiit'd tO Work IOfti'tl>t-| Id 1 a : l 1 1 • 1 1 ■ ' . i [la it tell I; if type 

uf problem- hi ( li t- case <if Sirm*. the probkiT) is web 
application*, Thegwd "I' a [hiiiit*w»rk h t-r i LL ;iid programnicru im 
the development and iniuniennnte "f complex applications" 

Sit. Sinus ifil'l R container, bill in sonic Wap il nrls like une. 



Top five ways Struts is like a 
servlets container 

1 Declarative: They both use an XML file to 
configure the application declaratively. 

2 Lifecycle: They both provide lifecycles (or 
predetermined iypes of objects. 

3 Callbacks: They both perfomi automatic 



4 APIs: They both 
objects that are supported. 

5 Application Control: They both provide a 
controlled environment in which your application runs 
They are your application's window to the outside world. 



I feel an analogy coming 
on... yauVe said Struts has "call- 
back" methods and a deployment 
descriptor. So is Struts like o 
mini-container? 




_. i Struts, I've 
f been promoted to 

V "Actfo-n Servlet" So Mistimes 
f I'm also referred to as a Front 
V Controller. (That's en the 



exam, by the My ) 



There i$ nothing about Struts on 
KK<** theextm! 

You ARE expected to know 9m purpose 
and function of a Front Controlfer (and Struts is just a 
tncked-out Front Controller), but you will not have any 
questions about the Struts framework. So. you can 
relax and follow along without having to memorize 



Action 
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partem* and struts 

How docs Front Controller fit in? 

Oil vt'itl i. Ki-init Contftjflftf is imfJth^rjSEB piMcta. and ii just happens in be uti ihct mm. 

A(:ILI;l|!y L Struts iti u trtilly fumy example of itning a Frtmt Clintrtiller pattern. Uwi'v. 
idea of the Fitmi Controller pa n< j ni is thai N single i isni|mneiu, usually a «t\|h lull possibly 
a JSP. iins as die singlr control point for the presentation tier of a weh application; With ilu L 

Front ContiTillcr pattern-, all of llic upp : s requests go through a single controller, which handles 
dispatrhinc; tlie request to the appropriate places. 

In the real wtprld t it's cane in implement a From Controller nil by itselE Even a really simple 
implementation usually include another J 2 EE pattern called an Application Controller. 

Strut* includes a class catted the tti'tjurstProtx^ur. which is uliitnaidy pespnaiibk for the 
li.inilliriH of HTTP request*. 

AUhuugh tin- exam might contain fpH'slimis about I he Front Coittrollt-r pattern, you'll 
bfi Hue if you remember the benefit? <jT Sinus, anil tin- fan thai Stints is simph a Front 
Controller with all the bell*, and whittle*, 

Eight features that Struts adds to a Front Controller 

1 Declarative Control; Struts allows you to creale declarative maps between request 
URLs, validation objects, model-invoking objects, and views. 

2 Automated Request Dispatching; The Action executed method returns a symbolic 
Action Forward which tefls the ActtonServlet which view to dispatch to. This provides another layer 
of abstraction (and loose coupling) between the controller and view components. 

3 DataSources: Struts can provide Data Source management 

4 Custom Tags: Struts provides dozens of custom tags 

5 Internationalization Support: Error dassssand custom Lags have 



6 Declarative Validation: Struts provides a validation framework thai removes the need 
to code the validate melhod in your form beans. The rules lor validating a form are configured in 



7 Global exception handling: Struts provides a declarative error handling mechanism 
similar to <error-page> in the DD. However, with Struts ihe exceptions can be specific to the 
applicalton code in your Action ob|ecl. 

8 Plug-ins: Struts provides a Plugln interface with two methods: initj) and destroy (). You can 
create your own plug-ins to enhance your Struts application, and they will be managed for you. 
For example, the Validator framework ss initialised using a plug-in. 
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the beer spp in Stmts 



Kef actoring the Peer app for Struts 

En0Mgb theory, kt's write a Sti'uis First oil", l^t's review 
oiii MVC Hi-fv jpp from chapter 'i. The only code thsti 
^itirift to chatigf when ue refat'tor n> Struts is related i" the 
MVC conuoUcfr; fThc model and view mce otd alTretcfl.) 




1 Having received a request, the Controller performs 
validation of ihe user form data 

2 TJie Conlruker invokes tfie Model component 

3 The Controller forwards to ttie View 



MVC controller code 
(from chapter 3) 

package cmn, example . Web f 

import com . ex^iple? . model . * t 
import javajt .serviet. * * 
impoit javajt.servleL.M.tp,*; 
i mpor t j ava . i o . f t 
Import java.util. *f 

public Class Beerselect extends HttpSeiviet ( 
public void doPost (HttpServletRequest request, 

HttpServ let Response responsa) 
throws lOException, ServletException I 

SLriny u = iBqueaL.ueLtdrdiiieLei ("uuIul") f £ *** 



freer-Expert be = new ficeiExpert ( ) ; 
List result - be.getBrar.ds (c) ; 



result j£p 



w e + g lot d 



request . setAttrlbuLe ("styles" , result) ; 
Re quest Dispatcher diap - 

request . gotRGquQstDiapatcher ("result . jap") 
disp. forward { request, response) ; 
i 




Forward b> fcVx Kirdtodea Sfe» 
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The Struts Beerapp architecture 

Ht-i'cs tiiv Beet ii|>p MehHeetacwii ail done in Sum** 



strul-s-cDnfig.jfmrl 




1 Having received a reque&T. the 

ActionServlei locates the correct fcrm 
bean using the struts-coif Eg. Km I file The 
ActionServlet invokes the form bean s validation 
logic. If the form bear finds any errors, it 
populates an AetionErrors ociecl 

2 Using the struts •oonfig.xml Fife the 
AcrjonServlet locates and invokes the Action 
object, which invokes the model and returns an 
ActioitForward objeci io the AeliortServiei 

3 Having previously exacted the necessary 
mappings from struts-coring. xmi, the 
ActionServlet uses the Action Forward abject to 
dispatch to toe comet vie* component. 




/ Action 



Wfcll, 0+;, the 

* Sfe-uls web m fa W 
Strwfc ?r<«<des 3 library ttat 

^'"A.Wthr HTML U< W«*y 

form git in 
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the form bean 



A form bean exposed 

kmiriubci. t tic- farm lu-an"* joh is u> validate 
thi* user'* form param*. A nice benefit of 
Suihk in a vnti i kin. step id built righi 
nun (In* ftrchhecmre. 




H , ■.mill) ailll 



L 

m at 




0' 




package com. example. web; 
// Struts imports 

import org . apache -struts, .action . Actl£>riMd.pp i ng ; 
import org. apache, struts . acrtiarii Act ionForm? 
import otrg . apache. struts .action . Act J.DnMessaye; 
import org . apache .struts . action. Act ionErrora ; 

import j a vax . rvl et . b t tp . Ht t pS e rv 1 e t Reque s t ; 

public class BeerSsleetFont extends AfiticmFonii i 

private String color; 
public void setColorj String color) I 
this. color = color; 

I 

public String getColor ( 1 ( 
return color; 

I 



-ri- 1 I' > 



UV*rl 



TUaillr isp 



rV» bta*s Mrife 



Wi^lly. FV*. 
£* all J the W para» S 



private static final String VAL3D_COL0RS - "amber, dark, light, brown"; 

public ActioriErrorr validate I Act ionMapping mapping, 

Httpsat vletEcquest request) [ 
ActionExrors errors = new ActionError s ( ) ; 



Tne Mwt,£«rvlet tails 




If ( VALIOj^OLORS.imJexOf (color) == -1 ) ( 

errors .add ("color", new Art ionMeasage ("error . colorField. notValid" ) ) ; 

I 

return errors; 



von in 

err on 




The Mho&rrnr ttmsirvtiiyr tike* 
a £tri*j -ttot --. a tywbolii key 

a reiourte bundle Thii il done XO 

fatilitate intevin*ti<mjlli*tioii. 
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How an Action object ticks 

Th£/V<*ioo c(hj<?ci n matnfya dispatcher, It En 
nrvoked by iln- AciionScrviet, which call* the 
Action Bbjset'a txeettieQ method. 



package com.exaniple.webf 

// Model imports 
import com. example. model . 
import java.util.V 

// 3trucs imports 

import org . apache. struts .action. Action/ 
import org. apac he. st ruts. action. ActionMappi rig; 
impLTt org;. apache. stiuts .action .ActionFotmf 
import org. apache. Gtruts . action. ActionForward; 



// Servlet imports 

import javax. servlet .http.HttpServlstReqisest 
import javax.servlet .http.HttpServle- 



public class aeeraelectAction extends Action ( 





y tU **** 



i Jslie ActLonFi:rWard execu be \ Ac tionMapp ing mapping, ActionFonn form, 



HttpServietRequest request, 
H t tpSe rv i e t Pe sponse respc n b e 

/( Cast the form to the application- specific form 
Bcpr5cI(?C!tFQO'L myFor™. = (Bp^r-f^lPCtFon?!) foe!?.; 

/ / I'rocess the business logic 

BeerExpert be - new BeerExpert ( ) ; 

List result = be »ge [Brands (myForm, getColor ( ) ) ; 

I / Forward to the Results view 
if (and store the data in the request -scope) 
request .setAt tribute ("styles", result ) ? 
tsjturn nusppi ng , findForwa r A < " sbo «_rw wl ts " > ? 



) 1 



rYcwd« atteii to (fee 
validated ten* p§ra-.i 



Send'*} * vttr hum f an* 
- to -the >»odel tempcwtut 



Tlie enetvte method re-Urns an 
AeWF***-d t* the Attie*£evvlet 
that direci* Strvti to diipatth to the 
ne*t appropriate view- Theie sy™b«|it 
"foi-vjirds" are declared w the fcSM&» 
ftenf ig*»l file 
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The Struts DD 



$irut$~c0nfig,xml: 
tying it all together 

Tin* struu-config.xaJ lilc u-aualogoiM i<< 
ilif l)D. You can actually Call ii whatever 
yon wmil. although itruts-ronJi^.xml \^ 
its comientioria] Jirimr, SimihiL to the 1)1), 
this til L- Is U'berc you'll declare and map 
Sums «Mlpont"titH in ytmt t»rli app. This 

mc<dhaiiisw htlp* >mir application becom* 
more looseh a 




li<f!rt r 



<?xml vers ian=" 1.0" &ncciding=" I SO— S 0 59-1" ?> 
<!DOCTYPE struts-config PUBLIC 

"-//Apache Software Foundation/ /DTP struts Configuration 1.3/ /EN* 
h 1 1 p : / / st r lit 5 * apache . o r g / dt ds / st r u t s -config_l_3 . dt d" > 



*St ruts-config> 

eftum-beans? 
< form-bean 

<:/form-hean-T.:> 



typo™" com 



<act i on-nuppi ng tf » 
caO • ifl path="/SeI 



type 




rForm" 

lo .wcsta,Iieer-$electlf , o™" 



;e r Pe iec r Ac c ion ' 
:ope- " request " 



validate-=-true" input=~/f orm. jsp"> 



< forward n ame» "shoH_res'ult»*' 

path-"/ result ,jf»p" /> 

</action> 
</action-mappinqs> 



TV ^for— be*n> element declares the 
symbolic name and tta« ef a form bean 
object 



^n <action> element mips the URL- path 
-to the Controller class; notice that 
the do extension «e the path a HOT 
included m tht Strati £*r,f i^rat>w. 

1 h* ■ 1' ^--r,-- also associates a form bear 
— w>th -the aebo*. Thii k ^eei&ed by th* 
symbolic form bean name Shriek will create 
thu bean and store it in the specified «ope 
If Nidation ofctwrs and errors ire returned 
frm- the validate method, then the inpvt 
attribute declare* the View responsible -for 
delaying the error meua^ej thu a usually 
the fern, that sotted thu afrbon 



The <fonMard> element creates a mappm^ between 
the symbolic wiew name, u«d by the ^dyon objeit, 
and the physical pith to the view Component- 



s-message - res ou r ~e s pa r a met e r - 
<. / s t_r u t a -conf iq> 



"ApplicationResources" /' ■ 
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Specifying Struts in the weiuml PP 

A* for a* ih,-. Container is eo»c«rft¥d\ tiu> AstioriSeivfet frjww 
another servtet, Sot you kawe no declare ii and makr sure .ill 
isf the wet* requests m-r mapped kj ii. 



<web-app xmlns="http : / / java . sun . coro/xml/ns/ j2ee" 

xinlriK:x£;i="http: //www. w3. org/2001 /XMLSchema-instatice" 
■xsi;schemaLocation="http: // j ava . surucom/xml/nE/ j2ee/wefc-app_2_4 . xsd" 
version-*^ *4 W > 

Na*^ the /tetui&rvlet "FvoitCe^ollet" 
isn't retimed! but it'll help rewind yw* of 
its y*-y**t in the Jff 

< sg r v 1 e t -name ^Fton tCon tr oiler / eg rvl et-name > 

<fiervlet-claEE>org .apache. Et ruts, act ion. ArtionServlet</servler.-clasE> 



e]— Define the controller aervlet 




SSt^aS* EtEUt£ COnfigU " ti0n filC * ""^^TKe-^fi^i^^telUthe^ti^let 

<par aui- value > / WJdB- £ NF/ s t ruts- confkg . xml < / par am- va 1 u 6 » 
</ inl t-param> 



<! — Guarantee that this aervlet is loaded on startup. — > 



<load-on-si tar tup>l < / load-on - star tup> 

c/servLat> 



Cj — The Struts controller mapping — > 
< rv 1 e t -jnapp i ng> 

•iserv let -names- Front Controller </servlet-name> 

<.Lirl-pattem>* .do<;7url-pattern> 

■ J — BNP; The struts controller mapping — 



■-'/w-eb-app-* 




TV fa&9&er4ti a topple* 

, h rt me thcd Jr ,l. e tter[«d^ 
servlet at st^-Lp- 

handle f\LL of this jpp's revest* 
(atsumix^ yet* name the revest 
HRU with a e*te*W. 



You should name 
the Struts DD 
"str ut 9-conf< 9- * m 

And rfyou do NO* lh*n * Y™ r "g x f „ DD ' 
Lou MUST declare an iml-para/n "config 

DO use ihe "^s-config.xm/ . Jgn 
SJrufs ivvfJ tod It automaton wrfnout an 
M-p^nwter. twf »S sOA oeWscftWKJ ~Sfo°tf 
practise" to dada^" ffie PP- 
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installing Struts 



Install Struts, and Just Run It! 

Installing Stum is nmffct* 

The lint* Lincl version* mentioned on ihis. pagt* were currem at the 
time of this vvrititig, VVhieh ii no help 81 fbi yi>\\, hut means 
simply; km A<«r Bfl mKm CAcr^j aw ft* fir rtf ismrwu im<! tftis, 
t>ut irrgtm if mir Imt shot tmyivajr. 

Six easy steps to installing Struts 

Ciiink up your browser and navigate to: 

http; / /struts . apache . org/ down load- 1 ? .htm] 

iji) I he l!rr»T.il Availability list, dirk on ilu- \nu-m Strut* v\.'.'i* link 



Choow die JAR lile you desirCr The sraa]lc*t JAR is- die lihrnry-inily version: 

stmtH-l .3.8-llb.2ip 

I fcfwnload (he ?.ip lik to a tempi nr&ry directory 



I 5^) Unzip iIk" file which unpack^ la: 



struts-l, 3. 8/ 
NOTICE . tart 
lib/ 

struts-core-1. 3 .8. jar 
s truta - tagl ib - 1 . 3 . B . j a r 
comiKms-bfianvitils-l , T - 0 , iar 
conuntin.a - digester . jar 

cos22Gn.s-chai.n-l, 1 .jar 



i, B ) Qnpy the fivi-jAK filfS- Its-led in step 5 to the webappV 
WEB -INF /lib/ -lirec-ioryj 

FY1: make sure thai there ts a copy oi Struts core JAR file in 

mm i lasspath when ymi compile your form bean* and action objects, 
(Retiiemhrr. the ActkmServlet front irtnholki is created for you 
autotaatically.) 
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Creating the deployment environment 

This h dW director^' RtroctUft you ivJU mail' id run tlu> 
Sirim verwon of the Beer <ipp. 




Y»'ll treiic we of -the* if ya* want 
■b ihttv-hitwhaliz* tke tewfc elisf byed 
t» yo*r kner Jfofcher tha* hat-d- 
iode er+e*- ie*t «■ atKet- Sinhy 

few dnplay, you iJn uIC J rftourtei 

prtpflrtte fw to prevde key/ value 

mapping jnd in your JSP, you CJn 

invoke a ipetujt taj fov the key, and 
tSe -jpped iwi will be displayed. 



Opt^al 




TWe i-io 
deployment 



BMlSttoi/udron.diini BwlSi^lf 01 In cfani Ba«f «psit clssa 



bVranci v«d by St*** 
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business delegate 

Patterns review for the SCWCP 

UVvr cowed n fot lit" p;i»t*rm in tin* la*t two i luipti-rs. 
Ths tics! few pagfspufi together b Lot of 1 1n- details 
ymi'll want in study Tftr ilir SCWCD exam 

business Pelegafe 

Use the Business Delegate pattern to shield your 
web tier controllers from the fact that some of 




Customer 



|— Business Delegate features 

ArJs as a proxy i 



54 



■ In itid tes com qi u mcalions with a remote sen/ ice 

■ Ha miles communication details and exceptions. 

■ Receives requests from a controller component. 

• Translates the request and forwards it to the business 
service [v\a ttie stub"). 

■ Traostates the response a hd returns it to the 
conirolier component. 

■ Sy handling (lie details of remote component lookup 
and communications, allows controllers to be more 
cohesive 



Business Delegate principles 



■ hiding eomptoity 

■ coding to interfaces 

■ loose coupling 

■ separation of concerns 

Minimizes (tie impart on the web Iter when changes 

occur on me business. Her 

Reduces coupling between tiers. 

Add: a aver to the app. which increases cornp esity. 

Method calls (o the Business Delegate should be 
man 
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Service Locator 

Use the Service Locator pattern to perform 
registry lookups so you can simplify all of 
the other tompunents (such as Business 
Delegates) that have to do JNDI (or other 
registry types) lookups. 




^Service} 



JNDI 



Manage [f ^ V ' C *J JMbT 

Customer tocato^ Server 
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Service Locator features 

□brains IrtittalCoiteKt objects. 

Performs registry ioofcups 

Handles communication details, and exceptions. 

Can improve performance by caching previously 
I references 



Works wilh a variety of registries such as: 
JNDI, RMI, UDDI. and COS naming. 



Servile Locator principles 



Trie 

■ Nding complexity 

■ separation of concerns 

Minimizes the impact on the web tier when remole 
components change locations or containers 

Reduces coupling between hers 
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Transfer Object 

Use the Transfer Object pattern to 
minimize network traffic by providing 
a local representation of a fine-grained 
remote component (usually sin entity). Manage 

Customs* 1 





■ Provides a local representation of a f emote entity 

ji .c , di i uujew LiidL ri inn ittii i a wjn m miia stme j. 

■ Minimizes network traffic, 



■ Can follow Java bean conventions sc that it can be 
easily accessed by other objects. 

• Implemented as a senalizable object so thai ft car 
move across the network. 

■ Typically easily accessible by view components. 



I — Transfer Ob fed principles 

■ The Transfer Object is based on ; 
■ reducing network traffic 

■ Minimizes the performance impact on the web tier 
when remote components' data re accessed with 
fine-grained calls. 

* Reducesooupling between liens. 

■ A drawback is that components accessing the 
Tiansfe' Object can receive out-of-date data, because 
the Transfer Objects data is really representing state 

1 tint's stored somewhere else. 

■ Making updatable Transfer Objects concurrency-safe 
is typically complex. 
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Intercepting Filter 



Use the Intercepting Filler pattern I 
requests being sent to servlets, or to modify 
responses being sent to users. 



Clrent 
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- Intercepting filter functions 

Can intercept and/or modify requests before they 

rckur-h the, cn.nA£si 

IWVil kiw <m ¥191 

Can intercept sndfor mod'-fy responses before they 



Filters are deployed declafatively using the DD 

Filters are modular so that they can be executed in 
chains. 

Filters haw lifecycles managed by the Container 



I — Intercepting Filter principles 

The Intercepting Filter is based on: 

■ wtesion 
• loose coupling 

■ increasing declarative contrai 

Declarative control allows Filters to be easily 
implemented on eilner a temporary or permanent 

basis. 

Declarative control allows Itie sequence of invocation 
to he easily updated 
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MVC pattern 

Model, View, Controller (MVW 

Use the MVC pattern to create a logical structure 
that separates the code into three basic types of 
components {Model, View, Controller) in your 
application. This increases the cuhesiveness of 
each component and allows for greater reusability, 
especially widi model curaponente. 




5* 



Model, View, Controller features 

Views cam change independently from controlters and 



II lUUCI-S. 



■ Model components hide internal details (data 
structures), from the view and controller components. 

■ If the model adheres, to a strict contract ([interface) , 
then these components can be reused m other 
application areas such as GUIs or J2ME. 

■ Separaiton of model code from controller code 
allows for easier migration to using remote business 
components. 



Model, View, Controller principles 

Model. View, Controller is based on 

■ reparation of oonccms 

■ loose couplings 

Increases cohesion in individual components, 
increases the overall complexity of the application. 
(This is true because even though individual 
components become more cohesive : MVC adds 
many new components to the applicaiton ) 
Mrtimizes (he impact of changes tn other tiers of the 
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Front Controller 



Use the Front Controller pattern to 
gather common, often rcdund 
processing code into a single component. 
This allows the application controller to 
be more cohesive and less complex. 



immv I sTrijts-confiG.xml 




tte*jues+ 



P SWfci implementation of 
! f>«it Controller Pattern. 



i— front Controller feature* 




Centralizes a web app's initial request nandling tasks 
iFi a angle (SmpOneTiL. 

Using the Front Controller with other patterns c-an 
provide loose coupling by making presentation tier 
dispatching declarative 

A drawback of From Controller {on its own. without 
Struts} is that it's Y6fy biiiebones compared to Struts. 
To create a reasonable applicatior from scratch 
using the Front Controller pattern, you would end up 
rewrittng many of the features already found in Stmts. 



Front Controller principles 

■ The Front Controller is based on: 



■ separation of concerns 

■ loose- coupling 

■ Increases cohesion in application controller 
components. 

* Decreases the overall complexity of the application 

■ Increases Die maintainabifily of Ihe infrastructure 
code. 
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Given All list ftf iiiu iliLiK s; 

- related [it tbtereeptktg Filler 

- supports role separation between developers 

- udds reusability 

WMdi design pattern is 3x-mg dei^ibed? 

□ A. TriimtiT {JhjrM 

D It Sfivitv LinntHtr 

□ C. Front Corrtmtlei 

□ 1). Busing Dttcgate 



Tin - design n|" yniir ueb .lpplii-atimi cidU Bar certain gecurity measures in be 
tnkni fur I'Vcn request ret -rived. Sftftie r>f iln-st- security < }ic-t"k?i will be applied, 
regardless oj the type <rf rrtiu^i. 

Wliit li design pattern tan he usrd lo achieve this design rei|i<irenirn!; J 

□ A. Troisier Object 
G IS, Scrviie Locator 
Ll C Cumpw ite Emily 

Q 11 Business legale 

□ R. 1 TiliTifjtliiii' Filler 



Y«mr lonipitm w.iws id leverage distributed sil<jn. Vourjob & to 
kcmihI^hIv integrate your sppjicatibfrii web wvice cndpointii wnh it* i.)At >■■ 
In .uldilicn, your, coarse-grained Controller Locators tttttSl be enhanced to 
suppun JUMIL. UDD1 rjc^atfj#s. 

Wbidt design pattern can be used to achieve these design requirements? 
□ A Domain Ai m-Mitt 
Q B. Inteiteptiiig CftwerWi 
G Gn Composite Delegate 
Q D. Transfer Fiir ad e 
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This statement de*cribei the potentiaJ benefits oif a design piUtmi: 

The pattern reduces network roiuidtrips between a elicnl and an Enterprise 
lie tin, nnd jjjivc-a the client u local cupv of llif diilu <?ncup.sulalrd by An 

Kntt iprist' Bean after a single method c«II, instead of reqniHng several method 
i ulk Wrrkft design pattern is being de»«itel? 

LI A. Transfer object 

□ ]■>. Lntercerptiag ffllver 

LI C, MfxIH-Viciv-Cn unrulier 

G !1 Businras l>i-lff;:ilr 



Your company, Models 'R U& s is. prealing an advanced inventory maximization 
component thai can lx 1 used with nil nuLjor J2EE container vendors. Your job 
is in design the piei eqf 1 1 1 i s romponenl that will perliit nijMlJl lookups with 
whatevej vendor Eke <licm is wing; 

Whul clrsiirn pattern can help yuii arromplish this lask; 1 

□ A, Transfer object 

□ B. ItncreeptiiiK l-iltt-r 

CD t". Mofkl-Mcw-Cloniroli^ 
Q D Business Delegate 
D l'i. Service Locator 



While fine tuning jtow roulti-tieredJJiEE busbww application, jfQU-Nf* daeOvered 
ill. ii you d get better perfbrrnance il jfou reduced the nuinber ol remote 
request* your app umk< - ^. awl int rci^rd die amount <>f dain collected for each 

reqursi vim make. 

What design pudurn (houkl you roiisidrr to impl?im-n[ diis - luuipc in y"«r 

application? 
LI A. IVansfcr object 
O B, Jiervke Locator 
LI U. Front Gun in tiler 

□ U 3 nlprreptinpf Filter 

□ li, ModelAV^-C ,nller 
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Given thin lisl of aiiribiHt's: 



[i l.i In I I' i Sri ■•. i. • I. 



- rwdaeea coupling 

- call a ks>rr mid some complexity 



Which design pattern is be big described? 



□ A, ThuMfer Object 

□ B. Wrant Ctmtrollef 

□ C. Business Delegate 
Q I), Intercepting Filler 



□ B. M ode IAlrw-Cu ill roller 



Your web .i]>|ili<ittioi] usrs ;» SefsionBean component in a distributed application in 
make a specialized ciileul.nion, such hs validating crrdii-nircl numbers, However, you 
want in shield j™r wrh components from the code uwolvcd with looking up the 
Session Bean component and using its interface, Vnu want to decouple local application 
i \imes from tin- limiting 11 f j and Lis+- of ihe dtftributed eotnpuneiit. whose interface 
could change- W hichj2EE design pattern can vmi ttse In This case? 

Q A, Priin sI'it ohjret, 



□ 11. Sei vice LoL Liti.il-. 

□ C. M^JelA-irw-Coiitroller, 



□ IV iSll,ilieM Delegate. 



( iivrn this lisl i ll rt1 1 rilnili's: 



9 - 



- related in Business Delegate 

- improve* network performance 

- can improve client performance ihrough caching 




□ ,-V Tnimlei Objert 
Q B. Service. kN-MtD! 
Q C riont Coitlrnller 



Q D, Intercepting Filler 

□ B. MtKlt-lAiiu-Conirollcr 
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mm flifc list of in tribute* tCart J;lE t patted' ft |fi0> 

- filiated tit lotefetpdii^ F2tee 

- supports rale separation belwern developers 
• adds reusability 

WKich Ociifgi pattern i* being described? 

Q A. I m n-.fr! ( lU|<-t'i 

3^ K Sn * il '• ;in "- -TVo T alU™ ^0*5 r^^l kelft ^ate tt»e 

H c:. from Gowmttei tasks «r{*"«d by awkab* develop W the 



The design of your web application t alls for certain security measure* to tie tr^tt P*^*™ 1 *' 
takrn for CWfrjl request received. Some pjf these security (hecks will be applied. ^Sf) 
regardless " r r>f request, ? * 

Which design pattern ran br used in achieve tfrfa design teqahrtsmcat? 

□ A. Transfer Object 
G li. Service Lf« :alur 

□ <:. Cntn^ite Entity _^ ^ a w , 
1). Business lfrkRMr ^ ^ m ^ er t^t and "Jnifvlate rt^irffts 

R. Intercepting Filler 



Your company want* to leverage its distributed silos. Yourjt?fa is tc p^^^tb-^ 
seamlessly integrate your application's wefc service endpninta with iis DAOs. 
In addition, your coarst-gfaincd Controller Locator* musi l>r enhanced to 
rapnortjgiffi, UDDJ rrg&trtet. 

Which design pattern tan be used to achieve these dewgn re^um-meni*? 

□ A. Domain Activator 

□ K. liilen i-piin^ Observer _ ^th ^ e irvtapW&d in the rt<HnenvOvb, 
3 a Composite Delate f^ff n> *f ***** ^ 
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statement describe* ihc pruenlLiI benefits erf a design pattern: 

The pattern reduce? network round trip* between a client and an Enterprise 
ISi-uti, unci givea the l lie nl a ktirul copy of the dulti encapsulated by an 

Kntt rpriu Renti jdter A single method col£ instead tjf tequiriftg sew* a] nu-tln .*.] 
calk Whkh design pattern is being described y 

3 A. Transfer object -fl key benefit of ^a Transfer Object 

iff iC 



□ IV FEiicM't'piitig Filter 
G (J. ModH-Yiew-Conlrullei 
G I). Business Delegate 



ti the reduction of netvjork fcra-( 



(£>e 



Your company, Models 'R Us* is creating an advanced inventory maximization 
component thai can be used with all major J2BE container vendors- Your job 
is in de*ign the piece of this component that will r^rJbrinJNDl lookups with 
whatever vendor die cHenl i-- \jdng, 

What design pattern ran help you accomplish this task? 

□ A, Transfer ohjpti . 

U," _, _TW Service Locator be used when you 

&W«*eptm« Rlttf ^ ^ ^pjjfc w«- depend***' 1 , 

□ ( ;. Model- Vi< w-C:<nitr«)|]er Concern^ stmt* lookups. Uiin^ this fatten* 

□ & Busine« Detefcite * ^ ^ «** * * ^ 
_J ( r re™ vendor to *e*0°r 

Oh J-,. Service Loculot 



, r J7££ Patted 

While fine tuning your rmilti-tk«d J2EB bu*m«si application, youVe rJiit overtd ^^^J^l^ 
i hi»t yi mi VI irfi heiii-r performance if yod reduced the number of pemoie 

requests V< mr npp makeis. ; n ir I inn-ci-ised ihe .tmolinl of dalu rollrclcd for each 
rccjucsi you make. 

What design pattern should you consider tfe implement this chillier in your 

appHcatioa? 



7 



\. Transfer object 

O B. Service La < otoi 

d d Front Controller 

G I) 1 nlercept in fr Filter 

□ E. Model-View -t:"Miro|fcr 



-The Transfer Object can be used to ^re^ate multiply 
fine-Arained ren»ote Calb into a single tall Of te»v the 
reduit'OH ih network it-jffid more than makes up for 

tHe overhead of populating a larger object, and an 
increase in performance can be achieved 
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Given this list of attributes: 

- related tij Service Lin-mm 

- ivclueps coupling 

- can a layer and some complexity 



Wliii h design pattern w beiiii; desLTitied? 

□ A. TiansiiT Object 

□ B. b««t Conmiflcr ^ fl ^ „ adJe(J( lKe ^ ^ 
3 (.:. Business Delegate fatten (strfh a* **duWd Couflinj a«6 i siller 

□ 1 1 Intercepting Filter tuto tier * «*^><- 
Q I 11 ,- Mode l-Vii-w-tknitmlliT 



Vottf wet) Application use* a SestsipnBeaO rnituumnil in a rtimi ilntu-d application to (Core JlEE 
make a specialized calculation, such as validating credifceard mtmberi However, ymi ™" t " i ' 

want to shield your wrb components from ihe ende involved with looking up tlie 
ScssionBean component mid using its interlace^ You want to decouple local application 
dawes from the looking up a ml u of (In- distributed component, whose interface 
r.LHilcl rh:iniic. Which J'iKK ih'^uu pailiTH i i in Volt use in this case? 

Q A, Transfer object. 

□ \\. Service Locator. *A lew Wf it of the Brines Delete 

C Mn:l, -,, w-f ..r.t.t.oller. « **P li "» ^ e ^ t „, 

".. preWhtaW btr 3«d i^e bus««« tier- 

I). Busineu Peleg&b 1 



( Jiven this list of .ittrilnitrs: J?£-F- Patterns. ^2-^ 

* related to Business Delegate 

- iui]jnn M ftStWOl k pCI hu ui.ilicc 

-can improve client performance through caching 




J i 

-j "7 ' -By ttia pattern t» f«* b, « 

M IS. Si i \ ii ( j x ;iri it ^e «iwerk «IU rveteiU^ to lookup ard 

□ C. I'Yimi Controller trtjfce taihess cbjetb 
G 1). Intercepting filler 

□ E. Model- View-Corn ml Icr 
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Appendix : 



Final Mock Exam r 






Do NOT try to take this exam until you believe you're ready for the real thing. If you 
take it too soon, Ihe-n When you come back to it again you'll already have some 
memory of the questions, and it could give you an artificially high score, We really do 
want you to pass the first time. (Unless there were some way to convince you that 
you need to buy a fresh copy of this book each time you retake the exam...} 

To help defeat the "I remember this question" problem, we've made this exam just a 
little Jhanterthan the real exam, by not telling you how many answers are correct for 
each of our questions. Our questions and answers are virtually identical to the tone, 
style, difficulty, and topics of the real exam, but by not telling you how many answers 
to choose, you can't automatically eliminate any of the answers. It's cruel of us, really, 
and we wish we could tell you that it hurts us more than it hurts you to have to take 
the exam this way. (But be grateful— until a few years ago. Sun's real Java exams 
were written this way, where most questions ended with "Choose all that apply.") 

Most exam candidates have said that our mock exams are a little more difficult than 
the real SCWCD. but that their suores on our exam and on the real one were very 

dose. This mock exam is a perfect way to see if you're ready, but only if you; 

1 ) Give yourself no more than two hours and 1 5 minutes to complete it. just like the 
real exam. 

2) Don't look anywhere else in the book while you're taking the exam! 

3) Don't take it over and over again. By the fourth time, you might be- getting 93% 
and yet slill not be able to pass Ihe real exam, simply because you were memorizing 
our exact questions and answers, 

4 ) Wait until after you finish the exam to consume large quantities of alcohol or other 
mind-altering substances,., 
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*puto£ 1%ec4 Zxam 




A projvraimin-r h*» -\ validly configured din-dory Mrwturc Htr his Juvu EE wjcjb 
application whi^Ii is railed MyWrhApp. In which two dbfettprietf < 1 1 1 1*1 a filr catted 
tnyTag, tag irpiide in order m be aei-rssrd t.orrmly hy the roru;iiiiiT? (Choose two.) 

□ A. MyWehApp/WEB-INF 

□ \\. MyWobApp/META-INF 

□ ( ! . MyWcb App /WEB -INF/lib 

□ 1>. MyWeb App /WEB -INF /tags 

□ hi. MvWebApp/WEB-INF/TIjDs 

□ T MywebApp/WEB-lHF/tags/my^ags 



Which t>r ihc following &tz tegal EL? (Choose .Ml iii<ii ;*ppK 



□ [1 ${l plus 2} 

□ ( s<: 2) 

□ J). $(2 div 1] 

□ K. 5(2 s 1} 




A. ?{ h l" + "2"} 
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A ' I ' J ,1 > from a Java tartan wbsite contains this t:i^ definition; 
<tag> 

<nama>a va tar </ namo> 

< tag- cl as s >hf . Ava ta rTagHandl er </ 1 ag- c la as> 
<body- con ten t >erap ty < /body - con ten t> 

<attribute> 

<name>use vJ d< / nsme> 

<requi i:Hed>ti:ue< /requi z ed> 

<rtoxpi:value>true</rtcxprvaluc> 
</attribute> 
<attribute> 

<nan>e>s i z e< /name> 

<r egui r«d>fa 1 se< / r equ i re d> 

<rtexprvalue>£alse</rte5tprvalue> 
</attribute> 
</tag> 

Wlmi is true uIhhii ,V :iI.iiT:luH.iii<1Iit. .issmninfj ii rvinuls 
ShnplcT&g&U|>pon andoutpuU HTML i Ink displays a ustr's ;ivaur 
mMgc? (Choo«! all dial apply.) 

□ a. The class should have a ni^ - member iviili & least a setter int-tlmd. 

LJ 11 No size variable U needed in the cudc because the TLD states it 
i- 1 1 ' h required. 

D t . An 'A-t'i iiildcii doTag Jifrrydc method la needed, 

O D. An UYiMTiddcri doStartTag lifetycle mclhud j-s needed. 

Q K. Ttle class nuisl overload all implemented lileiyele methods with 
;i M'isii.ii thai mdudt-s an t-xtra paraint-itr lor evm attiiliutt- 
['icfinrn in tin- TLD. In iiii^ i-<*sc inert- is i miv hifh-. 
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A Servlet sets up a bean belbro forwarding [ft *>JSP 

20. foo.User user - new foo.tjserO; 

21 , user .setFirst (request .getparaweter ( "firstName") ) 
22 . user .setLast (request. getParameter ["lastName 1 ") } ; 

2 3 . user . setStroot ( request . getFararnQter { "streatAddress" ) } ; 

24 . user . sctCIty (request .getParameter ("city"} 1 ; 

£5 , user . setState (request .getPararaeter ( "state 1 ") ) ; 

26. use t. set ZipCode (request. getParatne tetC'zipCode") ) ; 

27. request. setM: tribute ("user", user); 

What snippci, if plated in a JSP, could replace ihc Servlet iSaAa above? (Choose all thai apply.; 

□ A. <jsp:useBean id- "user" type- H 'foo. User "/> 

>_] IV <jsp: usefie an i d= " us er " type-" foo , Us er " > 

< j sp : se tPrepe ity n ame= " u s er M proper ty =" *"/> 
</ jjsp: useBean> 

□ (.!. <jsp: useBean id="user" class-" foo, User M > 

<jsp r setP toper ty naIne="User" proper ty= "fits t" pa r am= "f irs tName " / > 

< jsp : set Property name="user"' p roper ty=" last" p aram=" last Name " /> 

<jsp : setProperty naroc="user" proper ty="s tree t " param="strcetAddress"/> 

<jsp : setProperty nsme="uaer" proper ty ="ci ty " /> 

<jsp: setProperty najge-"u4er" proper ty ="s ta te" /> 

<jspr setProperty name- "user" proper ty-"zipcode"/> 
</ jsp:useBean> 

□ 1) <jsp:useBean id="user" class="foo.User"> 

<jep : eet Property name-"user" proper ty-"*" / > 

<jspr setProperty tiame="user r ' property= "first" par am= "firs tName"/> 

<jsp; setProperty ¥iame="user" property^ "last" p a r am=± " las tName " / > 

<2 isp : setProperty namje="user" proper ty= " s treet" param= ,, s treetAddress" /> 
</gsp:useBean> 
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When comparing the benefit n, limitations, and uses of a business delegate object 
and a service locator object, which are triw? ■ Chouse all thai apply) 

Q A, They are equally likely hi make network calls. 

G B. They Hre equally likeh to invoke mcthbd* in ;i transfer object. 

□ (.'. 'I 'hey Lite equal!; likt-J y Ni Ik- invoked dirrcih from w cortfrollei abject. 

Q T), The service locator will typically be coiisiile.red a server to llu- business 
delegate: 

□ E, When both are implemented with a cm he, data staJeness is a biggej 

issue for the business delegate. 



When i. iv.nim: -i ssimi liiH'in i^ w\i\- It .ip 1 mn\ J ChimM- nil dial apply.) 

O A. They aft all declared it! i]te DO. 

□ I!, Not all of diem musi tje declared io the DD, 

□ G, The DD tag Uwd to declare Uj*m $ <listen*r>. 

□ D, Tli.' DD Mi- nsrd u, d<-« Ur,- ih, in i> < session-listener^ 

□ i:. The DD tag i»ed to deehi.- dtem & ptaoed within 1 1 ■■ <we±s-app> ia K , 

□ E The DD <a K iisi-d tit [leeLiir ihc-jii is placed within i he <servlet> lap;. 



Nome ii-.it- |i.ive I'liiiiphu'lierl 1 1 1 . 1 1 sl|-.nij;r I htril^^ are happening when lhe\ have 

two browser windows open on a single machine and both Iwndxrws Kcceu I he 
application at the same time. You waul to test various browsers to see if a session 
would be shared across multiple windows. You decide to do liiis by output Li tig 
[hi JSESSIONID in a [SJ J . How could you aL-L-omi'li-li ihhi asscmiitik: vmi haye 
cookies enabled nu yom UM hnmseiv ( tlOOM all that Apply.) 

□ A. S ( cookie . JSESSIONID } 

□ K Si cookie. JSESSIONID. value} 

□ C. S{ cookie ["JSESSIONID 11 J ["value"] } 

□ 1). S ( cookie. JSESSIONID i" value " ] } 

□ i; $( cook io ["JSESSIONID"] value} 

□ V. $ (cookieValues [0] .value} 
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\\ I . I : ■ i i rJii i i ■ I ■ 1 ■ - ■ - i ei ii . -ill. iii i -ii , 1 1 . i j i ill. Sc-rvlotCon-oxt 
G .A. server 

□ Ik context 
G £!, request 

□ 1 }. application 

Q 1'.. ser vie tCon text 



Which nit- thuds csisi in HttpServlet; Choosr- Tli<n Hppk; 

□ A. doGet 

□ B; doTrace 

□ (.:. doError 

□ L>. doConnect 

□ ]■'.. dooptlons 



\'i m have rlt'ti i nutted thai ciertain lapabiliiii-y in \<iur weh application will require that 
own he regi«e«d member*; hi addition, your wefe appffe adoti sometimes deal* with u*ei 
darn ih.ii ■.' iseti wnsa you to keep confidential. 

Which fire iruc? (Choose ^1 thai apply.) 

O A. You can make transmitted data cuniidcntial only alter your application ha* 
vrcttted the Mpr\ pswwwwd 

□ B. Of the various types of authentication goat^jiteed by a Java Kl : , marital ner, only 

U W< [»!•,. -i, 1. I'll (I II: : I 1 1 | ■ i - ii-.. Mh-.l l,\ Ml.il. ti in m ;. H- ! If I* 1 -I 

password. 

G (J. Nn matter what type of JaVa KB autijentjeattOH meehanhm you use,, it will only 
he activated when hti ntherwise-weMMf^Wd return- '•« reqpiested. 

G Dt All qf the Java EE guafimteed types etf authentication provide strong data 
senility wiilMJtii il -rd iii linpli in. in Mt]i|>. .] i i 1 1 ij. ■< ii\ feature*. 
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Given these Fragments fmin *v^'~i I, li 1 1 1 a ^iripjlr tag in a Java EE "E)D: 
343. <web~ re source- col lection> 

344 . <web- re sdurce-name>Fteeipes< /web- re source- name > 

345. <url-pattei:ri>/Beer/Update/*</ui:l-pattern> 

346. <h t tp -roe thod>PO ST< / h t tp-me thod> 

347. </web -resource- col le c tion> 

3 £ 7 „ <au th - cons tr al n t> 

M | . <role -name >Member<,f role- name > 

3 6 9. </au th -cons tr ai n t> 

■ ■ . 

385. <usar -da ta - cons t rain t> 

386. < tr anspo r t-gu ar an t ee>CQNFIDENT IAL< / transport- guar an tee> 

387 . < /user -data™ constraint- 

Which are true? (Chouse all that apply.) 

□ A. A jain El r , DD ran (."main a single- lag in whidl all of tli^e tags run legally CB-esjsl 

Q B. tt is valid for mob: instance* of <auth-constraint> m r\i-ii within (lie itfetgk 
rlcsi ril htI aliiiVr. 

Q 0. tt is valid for more inrtanrei of <user-data-constraint> 

U) D- li i-- ^ihfl (i it mure inciqticgi *jf <url-pattern> to '\i*i wiihin (Sir 
< web- resource -collection tag Scribed abiwe. 

□ I" 1 1 iv s : 1 1 i-i I for other tags of the same tyj*e ;i* the Missrli" encapfag tag detcribed above to 

have tin- tarn? <url-pattern> st* th* tag abca*. 

□ E This U S implies tha, wtMswtoa, witJte^tfcm, ,.ul d*fc in^ri.y ^niu feature 

iirp all declared lor the weh application. 
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You are treating ±1 .|SI' Document thai generates u dynamic SVG Image wilidi 
h ri |)re"sct4C<-d by an XMI. tJoctWWfiM strut tun-. The JSP must detlare (he 
HTTP rfs.p»nsf IhmhJit ' Con tent- Type ' -.,> 1 im^ge/svg+XKl ■ ^. ih.it 
ihr web bfroWScfWU] render tin: response Hi mi SVC ini«^-, 

Which JSP iMde snippet declares tfral thi$JSP Document Es an SV'U response? 

Q A <%@ page eo nte n tType= 1 image/ svg+xml ' S> 

U H <jsp:page co nte ntType^ ' image /sVg+XnLl ' /> 

□ CI. <jsp : directive, page con ten tType n 1 image /svg+jonl 1 /> 

G D. < j sp : page . contentType >±mage / s vg+stni < / j sp : page . con ten tType > 



Given in a JSP page, the line: 

<*— out . print ("HgIIo World"); — %> 
What is the HTML output? 

□ A. Hello World 

□ B. on t . prin t r He 1 lo World"); 

□ C. << — Hello World — > 

□ D. ttti autpul generated l*y this line. 



Whiuh statements about HTTP session support are trm.-? (Choose all that 
apply I 

□ A- >vn EE conlumcn rauuL uupport HTTP Lcokica. 

□ R Jiivit EE Coatiitn,fiN pusl iveppon URL rewriting 

□ a jhv, EE W mwm m m<* m &m ***** 

□ 1). >vm KK eoiiutmerfl musi ntpfori HTTP ite&wii*, puti for 1 diejitt (hat 

Q Kl Java KK 1 '1 mtaitter? roust cecugnfce the HTTP termination signal that is 
isstifd tn i nd i* an- thai a i li*-ni session is itn longer at tiv^. 
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Ykiii f innp^iiv lut* f>uic|];iM (l .1 I'mii-ie fur a shirt! party JavaScript 
library fi>r commicting rrjrnus. Vbttr ie;nn baa run into i'[Hinilt*s errors 
by rrmiakm^h misusing [he library and the u^.-r-s are, insisting that 

i.riliUII IIK'lIll ilrNli nlli'tlkl miiU Ipr * iirljk In llM|» uilll 1 1 n' .ill 1 1 n >| i/i-il 

security role. A custom Uuj lihrarv usini> Simple u\% handler* u>nkl shield 
dcveloperi from making syntactical Java-Script errors ami provide the 
security features the users desire, 

After a design meeting, your team lend documented that she would like 
tlic menu m loot like the following: 
<menu : main> 

<menu ; head It era text" "My Account" ur 1- " /inyAcco un t . do " / > 

<menn ; headl tea tex t^ " Transac ti oris 1 1 > 

<menu: subltem text=" Incoming" url="/inaomingTx .do."' /> 
<rDcnu:sut»ItQm text=" Outgoing" url='7outgoingTx ,do"/> 

<nienu: subltem text=" Pending" url= rl /pendingTx .do" 
r equ ir eRnl e = 1 1 a c coun tan t / > 
</menu : head! tem> 

<jEG>nu Lheadltem tax t= "Admin" url^"/ admin. do" 
r egu ± r eRo 1 e« " admin 11 /> 

</mQiiii:main> 

You wish to put the lull responsibility of generating output on the 

outer <menu:main> laff handler, assuming that centralizing the display 
logic will tie easier to maintain. The qutef ta^ handler will need access to 
its descencteni tags to accomplish this. Which of the Ebn'owtng options 
ptwides the best apptoat h 1 

D A. liverv utin-i lag should register itself direellv to its. ini mediate parent. 

'lite immediate p.iit iu i. .in Mine ir<. . hililn n in .in nidi-red Collection. 

U I! Every inner lug should register itself directly to the outer tag handler, 
.luff th-e outer ta£ handler can stare then! all in a single Hash Set. 

F1 (; L'sililj" tljavnii - Xsss 



til I j 1 I -a dV^1 I I till 

■I'" 



findDeseendentWithCLasa O and getChildren ( ) wh'wh ^\\< 
tin' main outer tag full Access t" ii* children without any extra 
coding necessary, 

□ I K, Hawc u»ch inner tag save itself As a page KOped attribute with its text 
1 aloe .is iii.- attribute Ijfcy, 
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Whidi JSP life cycle phas« con (S»use an HTTP Statu* <ooV to br- rftturticd r»n 
It) ,i ij-i 1 1 n--,i tci a JSP pBige? (Cbfltofe all lL;h apply) 

Q .A. JSP put;*- mtn pita H<m 

□ |1. ['At cii?iii[i i .1 i hi- mtv ii t- mm'cIkhI 

Q (.!.. Execution fjf tin* destroy method 

Q 1>. Kxivniion cat" I he [nitializ^iinn method 



Gtv> u iJi.ii session is a reference to a valid HttpSessien and ,r ra/Attr rl is 

die name of an object bound ta session, whidi can lit ust'd to unbind object^*) 
front a session? (Choos* all that apply.) 

Q A. session .unbind () ; 

Q l>. session . invalidate 0 ; 

□ C. session. unbind ("niyAttr 11 > ; 

□ ]h session. rew ve ( "myAt tr ") ; 

□ I'., session. invalidate ( M myAttr" ) ; 

□ J session . removeAttribute ( "myAttr") ; 

□ (>, session .unbindAt tribute ( "myAttr") ; 



II req h a ir-fcrf m <: m mi HttpServletRe quest ami iJm'it is no <un<rn 
18 M-s»ion, what is true about req. getsession <) ? €tuw*e adl that apply.) 

□ A. Invoking reg.getSessionU nill ivunn i,ulL 

□ B. Invukiuu req. get Session {true) will re turn null. 

□ C, Invoking reg. getsession (false) will lvmrn null 

□ D< Invoking req. getSes3ionO will rtMurn anew session, 

□ E. In vokinijj reqgetSession(true> will rri urn ;i new session. 

□ E Invoking req . getsession (false! *BI return a n«:u- session. 
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A Classic lag handler exists in ftgsey Guidfe The auihor 4vj5erte » hSRtflef that 
evithuies ta tag hody ,1 hundred rimes, to be u»ed in resting other ragH Uial 
produce random < oninii. 

Given: 

0 6. public class Hundred? tmes Tag extends TagSupport { 



Q7, private int iteration-Count; 

08. public int de-Tag ( J throws JspExcoption f 

OS. iterationCount = 0 ; 

10. return EVAL_BODY_INCLtFDE ; 

11. } 
12. 

13. public int doAfterBody () throws JspException { 

14. if (iterationCount < 1Q0H 

15. i t a r at ionCoun t+ + ; 

16. return EVAL_BODi_AGAIN ; 

17. J else { 

18. return SKlP_BOD^; 
19- ) 

20 . } 



21. } 

What is Incorrect about iln- code? 

Q A. Tag iutadlefs are not thread safej so iln iterationCount i ;iu become 

[lilt sync il Ullllt iplt- Ihcis .in- ii-.h liinu iln- pflgt R1 th< s:kiiic lirnf- 

D B. The doAfterBody me I hod is [lever bcuip called because it is not part 
of 'Che tag handle* lif'ecyvlt*. clci - du|jei i-lumlil havr i-steiidt-d the 
IterationTagSupport i J . i to in hide this method iit the life* yi lc. 

t '.. ]"||H' doTiig nil' I III nl s]|<iiild lie dci S Ld r LT . A- iv ■rim'il. L 1 1< ' di-foull 

doStartTag <>f Tagsupport i- , iJl<- I whii L *impl) rs-iurris SKIP_ 
DODif, -inn d*Af t*t&>dy n. v, ,- l„ ^Ikd. 

□ n Ul„ i, doAfterBody ,,u EVAL_BODy_ACAiN iln doTag ni.-il |(J <i iv 

called again . Tin: doTag method resets iterationCount to 0. raujting 
in .in Inliiiitr bop mid a java, Lang, OutOf Memo tyEtror ii thiwii. 
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Miv&n litis Im^iTit'tit lirtin ;t well ftppbeaUon i( 
72. oession-confLg> 



73 , <sesfl ion- time out>l 0</ sess ion- timeout? 

74. </session-config> 

And given that session i- jp rdfetcuce to ft valid HttpSessiort, and litis 
fragment from •■ sei'vlet: 

30. session, setitajelnactiveliiterval (120) ; 

After line 30 executes, which, are true? (Choose all lliat apply.) 

A. I he IH) ['l'lLitiiictii ia mu valid. 

G U. The invocation cl setMaxInactivelnterval will in udily the valm- in 
llit 1 <3ession-tiineout> [.i.e. 

Q C, ]i it bapOwible La determine the session timcjut litiiih given the shove, 

Ql 1), 11 the container receives no client requests for this session in '1 hours, the 
container will invalidate the session. 

Q [■', El the container receives no client requests for this session in '2 miiuites. 
the container will invalidate the session, 

Q K IT tiic container receive* no client rrquests ibr this session in 111 seconds, 
the container will invalidate the session. 

Q ( h II tin 1 container receive* no client requests Ibr this session in 10 minutes, 
the container will invalidate the session. 



Von have cix'nted a valid directory atrinsture and a valid WAR lile fin your Java liE 

W'll ;i|l[>lj; I riv, |, rj L .n: 

-ValidApp.var in Mm na^af Un- WW file. 

• WARdir represents the director) llml must exist in every WAR file 
- APPdir re presents the directory thai eiiuki exist in every" web application. 
Which is true? 

□ A- The actual mm of WARdir is NOT p redio -jIj I e. 

□ 11. The namr of yottr application is NOT predictable. 

□ C. In ihinrlinTtoiystinclinc, APPdir ^ill '^i-i i n> id r WARdir. 

Q 1). In this, directory structure, the application's deployment descriptor will 
reside in the same directory a> WARdir. 

O ¥„ Placing yonr application in a WAR lite provides the option fbi the 

container to perform additional riiniiim* checks noi otherwise guaranteed. 
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WIkmi . tampering HTIT GET to HTTP POST. wfea ii ii'i,-: 1 I .h. ►■>:-.. .ill ilui flpjit^ 
Q A- Only H'lTH GET is irir-nipuienL 

^ 15. Bnlh require nn clipfii ii ctfci l.u jiidn in HTML Liirm UigH, 

□ C. ( )nly HTTP POST con supporl nuilliplc- pni\T.nirLcrs in a single rcqm jl 

□ D. Bmli support single pojameter requests thai (tend multiple ifakw* 

G Ii. Ouh HTTP POST rcqin-il-s -IkhiIcI he li;imllt'd by rA-crridin£ a services 
service 0 method. 



Given tliis COd« in a scrvli-t: 

S2. String s = gotSorvlotConfig (> - go tlnit Parameter C'myThing" > ; 

Which 1)1) fragment will iissign to a the- value n my£tuf f ".' 

□ A. <ini t -paramo 

<pa ram>myTh lng< / pa tam> 
<VaI lie >my S tu f f <; / val ue > 
</init-param> 

□ V> <init-param> 

< n ame >my Th ing< / narae> 
<Value >my S tu £ £ < / val ue > 
</init-param> 

□ ( . <init-parara> 

<par am- name>my Thi ng</par am- n ame> 
<puv am - vft lue>myG'tu£ £</pa r am - va. 1 ue> 
</init-paraiti> 

O I>. <servlet-param> 

t name >myTh ing< / narae> 
< val ue >my S tu f f < / val ue> 
</servlet -par am> 

O K. <scrvlet-param> 

<par am-name>my Thi ng</par am- namo> 
<par am- vi Iue>my S tuff </pa r am- v a lue> 
</serv let -paramo 
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tiivTn that ii Sliiiip it stored as an attribute named AccountNumber nf some scape, 
24 h <i rijHlt i'.M wtfl Ouptut the attribute? 

LI A. <l= pageContext.ilndAttribute ("accountwunibet" } %> 

□ IS <fc- out. print ("$ {accountNumber} ") fc> 

□ C <% Object accNum = pagecontext, getAttribute ("accountNumber") ; 

if{accNum = null) { 

accNum = request . getAttribute ("accountNumber 11 ) ; 

} 

if {accNum — null) { 

accWw? - session, getAttribute ("accountNujitoer 11 ) ; 

> 

if (accNum == null) { 

accNum = aervl etContext . ge tAt tribute ( ! 1 accoun tNumber " } 

) 



□ 1). <% reque stDi spa tcher. include ("accoun tNuraber " ) , L %> 



You save inherited n legw j JSP well application with lots of leripting 
^JJj <-<»■][■. Vutir niiniit^fi hits ilrmiirtded iUm cvfcfyJjSP hi- refoctQtcd to remove 
•i«-ripiin$ ci«lr. Hi- wauls. y<m In guanmNi- iIi.h no scriptlcl • -< *r l« - e*M* in 
ynurJSPtixtfbftsf find in have llir Web container enforce a "ml smpling" 
policy. 

U'lii. Ii web . xtiil configuration tlrmnit will accontpliib ihis ipiali 1 

□ A. <jsp -property- group> 

<uxl-pattem> *.jsp </url-pattern> 
^permit- scripting?- false /permit- a crip ting> 
<. / j sp - pr ope r t y - group> 

Ll Ii <jsp-config> 

<url-pattern> *.jsp </urL-pattern> 
<permit-scripting> £al3e </f>ermit-scripting> 
</ jsp-comig> 

Q CI. < jsp -proper ty-group> 

<ur 1 -pa. t te r n> * - j sp < / ur 1 - pa 1 1 e r n> 
<s cr ipting- inval i d> true < / 6 cr ip t i ng- in va 1 id> 
< / j sp - proper t y-gr*up> 

□ I) <jsp-eoniig> 

<ur 1 -pa t te r n> * . j sp < / ur 1 - pa t ter n> 
<scriptitig-invalid> true < / scr ipti ng- in va 1 id> 
</ jsp-config> 
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Given; 

01, <%@ taglib uri- n http : // java, sun . com/ jsp/ jstl/core" prefix-" c" %> 

02, 

03, <% 

04, java , util , List books = now java-util ,ArrayList() ; 

05, // add line here 

06, request, setAttribute ("myFavoriteBooks 11 , books); 

07 , i> 
OS, 

09 . <a : choose> 

10. <c:wheii test=" '$ {not empty myFavoriteBooks} "> 

11. My favorite books are: 

12. <c ; f orEach var="book" itema= "${myFavoriteBook3> "> 

13. <br/> * SI book J 

14. </c:for£ach> 

15. </c:when> 

lfi. <c : otherwise> 

17 . I have not selected any favorite books , 

18. </c: otherwise 

19. </c : choose> 

Which "I ftm following lilies of code, ii ittmtxi^A iu<lt'|n-m:l<nily ;ii tine 3, will cause the texi 

within Llir- c : otherwise tag to display! Choose thai appl) 

□ A books. add ("") ; 

□ IV books, add (null) ; 
Q C, books . clear ( ) , 

□ n hoofcs.addC'HMd First"); 
G II. books = null; 
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Yijii tut working mi <mi application ttwt uu»ti;iu,*-N a business biting directory; 

< ■ ivi-Ti: 

-trr : f ci-rEacbi ira t = "jib nnf»Nnmh« r 11 i tr>m=i= 1 $ ( [-.fympjj-ny . 

30. <c : i f tes t= 1 $ ( verify : i sTell Free ( phoneNuniber J J "> 

31. <img src= 1- /iJiiagcs/TollFrse .gif "/> 

32. </c:if> 

33. $ { phoneWuraber | <br /> 

34 . </ e : f orE ach> 

Tho above snippet adds a special icon in Ironl of phone numbers thai are 
toll free, Which statement about the EL function from ibis code wtippi I b 

miLir:irH< h ■ ■ I In I .' 

□ A, The EL lunetkm must be dedared public and static 

O 11. Tilt- EL ['unctitin must tioi return any value and be declared void 

G C. The <uxi> value in the EL function's TLD must be Verify 

Q D. The name of ihe class that implements the EL function must be 
named Verify 

□ E. Ei phuneNumbet is u Sirinif. ih < fun ction - s igna ture> yjinr 

in the TLD should be iaTollFree (String) 



Which are mcihod.ii oi KttpServie tReques t ib.u n n n-ve ihe body oi the 
request? (Choose all that <ipply.) 

□ A. 

□ K. getStreara ( ) 

□ I). getlnputStraamO 

□ I". getServletReader O 

□ I getScrvletStreamO 
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Ciii'rn a Java liE vveb application in Which tin* fblloiving hrnWser request: 

ht tp : //www . wicfcodlysmart . com/ MyApp/myDir/DoSomc thing 

ill I •■■ h. !■ 1 1 ■ <1 by a jcrvlct in the application, which thrcr are true';' 
(Chouse three.} 

□ A Tlir deploymetii docripwmusi include tftttnujtiotM to handle 

ihr request M specified. 

□ It. Tin- requciii i ;m be handled a* specified with no related ix^trucitoiin in the 

deployment descrqjiaft 

□ C. The servlet (hat handles this, request must be named DoSome thing. class. 

□ ] >. "Hit- servlet name in nor predictable hasrd mi thr ioforntfltion provided. 

□ E. The ^iplfcstkn nuisi contain a dwecltfry named fflyDir. 

□ E "nil- name nl the directory in which the sertfe* resides is nw predtcuble 

bated mi the information provided. 

Your web application has a valid ilejiltiynujnl descriptor in which student and 
sensei are the only security roles, thai have been defined, The deployment 
descriptor contains t*vx) security constraints that declare the same resource to 
1>e con s.t rained. The lirst security constraint contains: 

234 , <auth- constraints 

235, <role-namQ>studont</rola-namc> 

23$, </auth-consttaint> 

Ami I In- m-<<iihI security constraint i imtnins: 
2 51, <avith- c on s tr a in t/> 

Which are I rue? i Choose all that apply.) 

A. As die fiepioynirnt descriptor stand* rtCIW, Ihr constrained resource ran 
he accessed by both rotes. 

Q is. As the dr-pWrueiu descriptor standi n«w, the constrained resource can 
he iiccc^ed i mh I i-v sensel 'N-r< 

□ C, As the deployment ili-serfptOH sl.inds imw, the constrained resource can 

be Bteeased enrj by stutfent users, 

□ I) II Hi- sec i <auth-COnstraillt> i au, h removed, (lit constrained 

resource ran be accessed by both roles. 

□ I",. If ihr- second <auth-constraint> tag is rerttOWid, the constrained 

resource can be act tsted only by sense! users, 

□ I-' IT the second <auth- constraint EBg is removed, the constrained 

resource ran be accessed only by student ttvi v 
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Which r»f tin- fc>l lowing custom tags & gMsurs&tcfcd to fail? (Choote nil thai apph i 

U A. <mine : border> 

<mine : plio t os a lbum= " S { albumSe lac ted J" > 
</irri.ne : border> 
< / mi ne ; pho t os> 

□ H. <raine: border > 

<mine ; photos album="$ { alburaS elected} " /> 
</inine. : border> 

□ (.'. <miine:border> 

$ { album Selected , title } 

<lnine : photos (album Selected }< /mine : photo s> 
</minc ; border > 

□ I) <mine: photos includj&Border= M ${userFrei&Earice border ) " 

albuia= "${ albumSclec ted J / > 



Vimr tHier web application uses the Java. EE patterns that arc most tyjjw all's used 
32 *S«a wwh so apptu-aii<m warns (a steers reniote m^sn-it's. Which an- benefits of 

ihrsr pallrrns? <C1hmiw all lhal apply.) 



D A. Increaatd cohesion 

^ is. jjetttsr perfbrmaacc 

□ C. Btltcc itiair)iain;»liihi> 

□ ES. kvih , ,t k II .1 HI- 

Li K. Isfpre interactive browser capabilities 



What is generally true ahma tke lih-ryrle of a servlei? I C house .ill thai apply.: 

Q A. You should NOT write a constructor lor a. servlet. 

□ II. You should NOT override a aei vlet* itiit{> method. 

□ a You should NOT r«*ta& ■ fctfyfcft do&etO (Withed, 

□ l >. Yftu should NOT twereid* a wrvlet^ doPostO m*th#. 

□ EL Ymi shuuld NOT <A-fn-itJi' a aetytet?* service {) method. 

□ K Yoti should NOT rjvm'ioV a sn-vlH - destroy O tunlnnl. 
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Given thl* portion i>J" a Java lili ,war (lie's directory rIliu Hii'i. . 
MyApp 

I-- METft-TNF 

I-- MANIFEST, MF 

I— web.xml 

I - - WES- INF 

|— index .html 

I I-- TItDS 

| | — Header , tag 

Wfcsl bbangef^ .m«' u.-cessary to mate ilii* structure vaWi ,unl ih<- reSbttKSM 
acccrtibte? (Choose till thai apply) 

Ul A. Nit Lhangi*fi are iit'L't'SiLLrv. 

Q H J In- web . xml file must be moved. 

O C. The index . html I tic must he moved. 

LI M. 'J 'In- Header, tag Ilk' must Ik? mined. 

□ E. The MANIFEST. KF lili x musl be rawed. 

□ I Tin 1 WEB- INF directory mU*t be moved. 

□ Tin 1 META-INF iln i'i in: \ ihu-.i In- moved. 



You arc considering impli-menting sumr varim (if MVG in yourjava F.li ri-lirr 
.ipplli .itiiiii. Wliii li an' true.' tilifiiMii nil thai apply.) 

□ A, This design will uften serve business delegate obje* & 

□ li. Il uficji icdwurt iiriiviuk u.dHi. >') tythiag itrtuutcl) lotted d.u.i. 

□ C. Thi^ <J*Mgn gnal Miii|itili('M fintimuuii iiiiiMfi with Wrogrm-"ii« icsminc 

registries 

□ fJ, Evtm (bough MVf.l solutions have many beaefint, thej often increase 

design complcjuty. 

□ F. Both slif from controller pattern and Struts could be i-nrisidncd solutions 

far this design goal, 

F, This design will prrividr you with, the capability to easily recombinr 
request and response handlers. 



you are here * 809 



coffee cram mock exitm 



36 



Given in a JSP p&g^ the line: 

<% List myList «= new ArrayList() ; %> 

Whlrti JSP rriftc snippets rnii ynn lisp m import llit*&<* Hnin typ^s? \i Ihtxw twry I 

□ A. <*1 import Java, util . * ; %> 

G 11, <%@ import java. util .List Java. util . ArrayList %> 

□ C <%@ page import"' java , util. List , java., util. Array List 1 %> 
G I). <%■ import java , util .List; import java. util .ArrayList; %> 

□ I'.. <fc@ page imports' java .util .list' %> <%@ p^ge 

impor ' j ava . uti 1 . Ar rayLi at < %> 



VoU RR (a»ked W$th ridding leVeral •un-itrily ft-alures I" y»«r ri»mp;iny\J;n.i l r .F. 
web application. Specifically, you Deed In create several classes ni user* and based 
Ml a user'* L"la»s t you need In restrict them In use only snmr of the application's 
pages. In order to restrict iicce&s, you must determine that users are who they say 
they are. 

Which are true? (Choa*e all thai apply,) 

O A. If you Jiwd lei verify that lihts are who they say they are. you niimt use 
lit- application's deployment descriptor to implniit-tit thai rctjuirenteflt 

Q B. Java ElVx authorization rjipabllicies should be lited to detfflaaiuie. that 
User* are Who they say lhey are, 

LI CI In order to help you determine that uaeo are Who toeey sa> they are. vou 
ntn tut* tin- deplovriieni dc^riptoirti <login~coniig> tags. 

Q I). In "nk-i lu llrlp >. Ii-(ri injur tlhil usea* ot« vim lutj i.iy (he} ,nr, .mi 

ran uk die deployment detc-riptafi <user -data -constraint teg*, 

L) Tv Depending mi the approach yon »isr. determining thai usen are tyha they 
saj they are might rtquirr im ludiug a "realm" 
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\, 1 1 ii I is ftJ^Vii I'.IL ftflplitittiufl Willi St sulnl ditttifiH 1 } --Ii'iil I Iiit, Ynlu[A[.i|i 
conttttbi .iril" imngr filrs in thrrr locattuila Within 1 tat" dirccloty siiucdirr: 

- Val i dApp/ imageDir/ 

- ValidApp/META-INF/ 



In wliitli of llirsv lof -at inns can clictltl cltrrclly access Uksc .gil files? 

□ A. Onh in ValidApp/META-IHF/ 

□ B. Onh in ValidApp/imageDic/ 

□ C. All of the above Iwstietw 

□ 1). UnK in ValtdApp/imageDiE/ .mil ValidApp/WEB-INF/ 

□ E. Only in ValidApp/imageDir/ ;md ValidApp/META-INF/ 



Given rsq h a reference Co * *ssHd HttpScrvletReqiiast, audi 

13. String f] s = req, get Cookies {) ; 

14. CooJtiel] c - req, getCookles 0 ; 

15 . req . setAttribute ( "myAttrL" , " 42 11 ] ; 

16. req. setAttribute( l1 myAttr2 lf , 42) - 

17. String [] s2 = req. gotAttributeNanifis () ; 

15. String [] s3 = req . getParanneterValues ( "attr" ) ; 
Which lirtea df 6«k will itol eotnplk? (Choose all that appl^J 

□ A. Ihte 13 

□ B. line 14 
I i |rn« 1 Ft 

W V.-> I J > 

□ D. line Ifi 

□ E line 17 

□ K Hi i. in 
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A Tag File luuin ■-.] Products . tag" elispLivs a list f>F products, 
Ci if-i^ji iliis snippel from the Tsiff File: 

1. <%® attribute name=" header" required™ 1 " false 11 rtexp rvalue™" false " %> 

2. attribute name*" products" required"" true" rtexprvalue-" true" %> 

3. tag body- con tan t=" tagdependent" 

Whkh Of ilir Folkwtng ;m- legal us:ige* of the Tag File? (Choose ail UuM apply) 

□ A <display : Products header = " Shopping Cart" products='£{shoppingCart} "/> 

□ H. < display; Products header="Wish List" products-" ${ wishList} " body- 

content= 11 £ {body } " /> 

Q ('■. <d± splay : Products header=" Similar Products" products™" $ {similar Products} "> 
Customers who bought this item also bought: 
</ display : products* 

□ 11 <di sp lay : Products header=<%= request . getPararaetsr (" lis tType" ) %>' /> 



You lire taking part in an initiative to remove iLTiptlets Emm ihi'JSr's uf a legacy 
41 Web application tor a major hank. Von come BOOM tin- following lims of code 

< * i i (( com , your company , Account ) reque s t . 

getAtttihute ( "account" ) ) . 
isPersonalChecking ( ) H %> 



checking that fits your lifestyle. 
<% J |> 

t[fiw i-jii you replace this nsingJSTL? (Chouse all thai apply) 

LI A <c: if teat= ' S {account. personalChecking) ' >Checking 
that fits your lifestyle . </c : if > 

_1 l>. <c:if test= 1 $ {account! "personalcheeking" )} ^Checking 
that fits your lifestyle .</cri£> 

□ 4\ <c;il test-"$ {account [ 'pecsonalCh^cKino. ']) "^Checking 
that fits your lifestyle .</c: if > 

G D. <c:i£ test™ 1 S(aecount. isPersonalChecking) ' >Checking 
that fits your lifestyle .</c; if > 
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1 1 n I. ili-i'.v in;.: i Vi hi I;, i 

- HttpsessionEvent 

- Http£cscionBindingSvcnt 

- HttpSessionAtttibuteEVent 

Match 1 lit- evteril types above (g their r*fjpecti^ listener btter&ce*. (None y»u fan 
match an c-veni type to mbpe than une Listener.) 

fl t tpSe s si onA 1 1 r ibuteLi s tener 

HttpSesEionListener ............... 

HttpScasionActivationLtstcnGr rrrr . .„„„ 

HttpSessionBindi ngLi s tener 



Whaft true aboaii the Hfeeyde of a scrvlet? iCUumim- .ill thai apply. i 

□ A. 'J 'lie service () mcfliHid u llw lirsl method invoked by the contabt'r 

wUm ;i new recjue*i is received. 

U. The aervice() method is invoked by ciLhi-r doP&st() nr doGet () 

i i I'l i ■ i lliiv'n- c< j tuple ted it request L 

LI G I'L: s 1 1 1 time ih.u doPoat () is invoiced, it runs in its qwd thread, 

Q D. The destroy^} nmhod Ln invoked after every invocation of doSet ( ) 
completes. 

Q K. 'J'li nmidei #*ue« a separate (Jireiul for each ( lictii requests 



When might ii.JSl 1 gcil tr.imliiH d? (tihourt iill lh.it iippl*} 

□ a. Whm tMe ejev^ope, conkpOjii wtjle in titi* mi fefeta 

□ U. When the application in rtttrttcl 

□ I ■ I I- Ni-' li:- l-ei n ')!!■ ^ 1 1 •• .l-SL* 

_l D. Alter jspDes troy 0 is led, it grts retranslated 
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Given ilii* fragment li'Vfin a valid doGetO method: 



12. Outputs tream os = response .getOutputStream{) ; 

13. byto[] ba = {1,2,3}; 
14 . os . write (ba} ; 

15. Reques tDi spa tcher rd - request . RequestDlspatcher ("ray . jsp" )■ ; 

16* rd . forward ( r eque s t , response ) ; 



lining iltai "my. jsp" adds tlve bytes 4, 5. and 6 to (he response, vhai i» the result? 

□ A. 123 

□ B. 456 

□ C! 123456 

□ U 456123 

□ An cxccpdoti is Lhrmvii 



- _ A programmer nerds (n updalr a livr. rumiiiif^ KCirvtet** iuiliali/alirm parameters 
40 t6 (lint lite wrb application will hrgin to use the- new paramcti immediately. 

lit urdf r ui accomplnh this; which must lit- true (although in it itt-re-isarily 
MifTint'iitj? (Choose all thai apply.) 

O A. For eat'Ii parameter, yuu musl modify ;i 1)1} iAg thai spi'tiiftes tfw tintflie 
of the iervlet t the name trf the parameter and tin- nevi rattle i>i" title 
pLiriinn'lt-r, 

□ B, The sen-let's coftstrwiot musl retrieve ihr updated DD parariieter from 

the scrvlct's ServletConfig GrbjBGt, 

□ c. Tlic contahitfr i»um destroy ;md then reitiiHiaBze the werrtt t. 

□ I J. hir eadi parameter, the DD mtisl have :i Separate 

<itiit-patam> 



mrt ^"' l ' L '» t 3?P* a i :in be uied in eonjunction with HttpSeruie tResponse methods 
4/ to stream oiupui data? (Choose all ihai apply.) 

_) V j a va . io . Prints tream 

□ \i. java. io , PrintWriter 

□ (.;. java , io. Outputs tream 

□ I ) java . io . FlleQutputstteam 

□ lv jav* . io . ServletOutputS tream 

□ I java . io, By teArrayoutputstr earn 
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Yum- vtt-h iippliciitioii |i;is ( J viitid i ] 1 1 « nh .1 <inii-|f < security -constraint 
lag. Within ilito las t-vtots: 

-a siagffc nrl pftttcm that (tefitofea directotyl 
-asin^l*' blip nu'ilnnl iIkii lIccLif^s POST 
- a hiii-L- i > ■ k name thni declaim GUEST 

II' nil of [lie resources lor your appliention exist within dircctoryl nnd 
directory2. and MEMBER to also ;i vafid mk which arc nm ,J Choose aJl 
ih:ii apply.] 

G A. GUEST- cannot do SET requests In directory I- 

□ H. GUEST* rah ilo GET icip.nM^ in I h.n1 1 1 tl irecl* irh's. 

□ V GUEST^ < ;iu di . POST n-quests only m directory?, 

□ Dt MEMBER- (fan do SET request* in both directories. 

□ &, GUESTs em do POST requests in both directories. 

□ F r . MEMBER^ Can il<i mily POST requests iit directory]. 



Given: 

1. <%@ taglib preflx= 'c rl uri= n http : //java. sun. com/ jsp/ 

jstl/core" ft> 

2. <%@ taglib prefix-" tables" uri="http : //www . javarancb. 

com/ tables" %> 

3. <%@ tag lib prefix- "jsp" tagdir-7 WEB -IMP/ tags" *> 

4. <4G taglib uri=" Utility Functions" prefix="util" %> 
Waal ;iknit toe alwwe taglil din-i livrs umild r.msi- I he JSP t« not function? 

□ A, Liiu- \ is wrong became the pr«[b< attribute (ftttsj come before the 
in I attfihtitr. 

l2 \i. Litir 3 in wrong became ifn-r*' to ti^ uri attribttte- 

Q C Line -i i* wrong becjiuse fhr- ari value musf begio with http:// 

Q H. Litae 3 to wron^ because die prefix jsp to reserved tor standard actions. 
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Given thai rasp is a reference to ;i valid HttpServletRasponsa olsjecl thai 

50 i»#wiin*j sunong other?, the following h<s$d$i •,: 

Content-Type : text /html 

MyHeader: mydata 
Ant) ihc following invocations: 

25. t esp . addHeader ("MyHeader", "my da t a2 " ) ; 

26 . r asp setHeader ( "MyHaader » , "mydataa » ) : 

27. re sp . addHeader ( " My He ade t 11 , "my da t a " } ; 
What data will exist for the My Reader licader? 

□ ,\. mydata 

□ H. raydataS 

□ C. mydata 3, mydata 

□ 1). mydata3 r mydata2 

□ Et mydata,niydata2,mydata3 

□ |-: mydata,mydata2 ., my da ta3 mydata 



Gwn the following portion of a webiWtd IVum a legacy application: 

<jsp-ccmfig> 
<taglib> 

<tagl ib~ur i>pre ttyTables</ tagl ib-uri> 

<tagl ib- locati on>/WEB~ INF/ tl da /prottyT able? , t ld< / tagl it- loca tion> 
</taglib> 
</jsp-config> 

Assuming ihe server ruuniiiir your code mm supports Java 1,4 VA', nr greater, what could yon 

do to rftmovB ihc- above < j Bp- config> lap nil tl f.till jteur cede work? 

Q V Change the Uiglilj directive** uri attribute in yottfJSft i ■ ^ tise 
and ihc container will automatically map is. 

□ S, Minn- <tiri>prettyTables</uri> in your TLD file, 

□ Ci Remove the taglib h In i'i- live-, thai used this mapping in \ 

JSPs. The contains? will handle ii automatically, 

Q 1 ). I'Iik is lit possible. The <^sp- config> entry here musi be 

preaem for the container to map the TLD (□ the uri referenced 
in yourJSPs, 
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For a page that lists shopping r.irt items, the message "Your -shopping L-;u _ t is 

empty." must when tin earl isetnpty. Which of the foflawing «>d* 

-nippers could satisfy this funetionaJity turning the *C9p&d attribute carl is a I. i f 

uf pJPCtOUCtt? (Gln.Ji.nr nil lImi BCply) 

□ A. <CLif test=" $ (empty cart J ■> 

Vour shopping cart is empty. 
</c:if> 

<c : f orEach var- « i teml nCa 1 1 " i terns- " $ { car t } n > 

Ohop : display I ten i tem= " $ I itemlnCart )"/> 
</c : £orEach> 

J li <c: f orEach var= 11 itemlnCart 11 items="$ {cartj "> 
<c : ohooso 

<e:when test= 1 ${ empty itemlnCart} 1 > 

Your shopping cart is empty, 
</ c ; when> 
<c ; otherwise?- 

< shop : di s play 1 1 am item="${itemInCart)V> 
</e: otherwise> 
</c:choase> 
</c ! forEach> 

□ (.. <c:choose> 

<c : when test= 1 $ { empty cart } 1 > 

Your shopping cart is empty. 
</e:when> 

<e ; when test= 1 5 ( not empty cart} ' > 

<c:f orEach var= "itemlnCart" items="$ {cart}"> 

<ahop : display I ton itern^" $ (itamlnCart} " /> 
</c: forEach> 
</e: when> 
</c:choose> 

□ II <c; choose > 

<c : whan tost- 1 $ { empty oajfft } 1 > 

Your shopping cart is empty, 
</c:when> 
<c:otherwise> 

<c : f orEach var— " itemlnCart" items™" $ { cart} "> 

■cshop: display I tern itea="${ itemlnCart} "/> 
</c : forEach> 
</ c : otherwise> 
</c : choose> 
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Given the following trade [Wim a s*rvlet| and gnvu dial myVar is a refereiti e fe) cither an 
HttpSession m .1 ServletContext 

15 . myVar . setAt tribute ( "royName " , "myVal " 1 ; 

16. String s = (String) myVar . gatAttribute pmyWarae ' 1 ) ; 

17. // nvore code 

M'wr lint* 16 executes, which are true? (Choose all thai apply.) 

□ A. Tin- value of e canuo! If |^uaramt;ed, 

□ IS. II myVar is , > n HttpSession. 1 otnpilaliun will fail. 

□ (-. II" myVar i-i :i ServletContext. rnrnpikukm will fitl I. 

□ I). 11 myVar few HttpSassion, s \s guaranteed m tuiye the value "myVal". 

□ I".. II myVar i-, ;i ServletContext. 5 is (fUatiUttted 10 Elavi tin' v:ilm "myVal". 

I iwen ;i portion of Java EE web applitaLioris deployment descriptor 

62 . <error-page> 

63. <exceptioiii-type>ioEKCeption</exception,- type> 

64. <loc at ion>/raai n£r r o r . j sp< / loca ti on> 

65. </ error -page > 

66 . <error-page> 

6"?. <errar-code>404<7 error -code> 

6 S . <1 0 c a t ion> / no t Found . j sp< / loca tion> 

69. </ error -page > 

Whai is l rile? 

LJ \ I lie rleplnynvnf rlpsri'iplinr is. not valirl 

0 IV [I 1 hi- applicaliratt throw an lOExceplum. nc.i I li in c will he ik-rvrd. 

U (!. U' the application throws an KJKxi eption, nolHiund.jsp will be served. 

Ll 1). If ihr ;i[>pli™iioii throws an lOFAceplmu. nwiiiKnor.j.Hp wfl] be served 
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Given the fnHdwiiijr JS] 1 : 

1. <it String GREETING - "Welcome to my page"; %> 

2. <% request . setAttribute ( "greeting" , GREETING); %> 

3. Greeting: $ {greeting} 

4. Again: <%= request .gctAt tribute ("greeting 1 '! %> 

An alltmpl h made to convert (lie above JSP to a JSP Document: 

01. <jsp :declaration> 

02. String TITLE = "Welcome to my page"; 

03 . </ j sp : declaration^ 

04. < j sp : scrip tl et> 

05. request. setAttribute ("greeting" r GREETING} ; 

06. </ jsp : 5criptlet> 

07. Greeting: Sfgreeting} 

08. Again: <}sp: express icn> 

09. request, getAttribute ("greeting"} ; 
10 i </ j sp : expression> 

VVh.ii is 1 1 1 1 i In- ni-u ]S|' Din unicnt? it'honsr all that apply! 

□ \. Xii <jsp; root> wa* dctlared. 

□ 11. The WSnptajC te&l should be wrapped in <i <jsp:text> Liiji. 

□ (.:. LL expression* art* not allowed m JlSP Documents. 

— J 1). I'lir <j3p:expres3ioti> contents should not have a semicolon , 



Which of [In- Following h LEAST likely to m.ikr or tectivc network l s« tJ« * 

□ A. JNUI htwi 
G ]'.. iransltr djjed 

□ C, M-llin-JlH, 

□ U, i'ronl cnnlmlkr 

□ ]'■',. iiJi.Tcrpiliijr filii'i- 



you are ;i<?re * 



coffee cram rnoeff exam 



57 



10. $ {questionNumber } ; $1 question} 

11. <c;forEach var-"answer" Items-" $ (answers) "> 

* * * 

16. </c:forEach> 

'I hi 1 question attribute i* a String lh;;i jnsiy contain XML i ■h-K'-h di;U must h.- 
disphyrd In the browser an regular test With iln- above snippet, the browser 
is not displaying the XML tags. What can be changed to lix this? (Choose 
all (bat apply) 

□ A. Rcplnn question } wit li <c: out valuer 11 ${ quest! on}"/ > 

□ U. Hfplurf $i quest ion) with <c: out >$t quest ion ></c:out> 

□ C. Kc[)I,h^ $( question ) witlKc: out escapeXml-"true l> value- 11 ${ question} "/> 

□ l>. ${ question} viih <%- ${questionl S> 



Vbm |:iv;i KK web applfcarfoo is gaining in popularity and jrou decide to add 
5o M'< <iri<l M'tA t-r in mppon the volume of client request*. Which are intt* about the 
ini^ratioiL Of ft Kcssibll fmm one server tti the Niilierf (Choose all ilia< apply.) 

Q A. ?s ii c- 1 1 iiiij;i.iiirNn* are mti possible within •> sewiioit 

LI U. When a session in migrated, its Hfctp Session goes with it. 

□ C. Whe ei -i settioo i* tiiiiri-iit'il. \it ServletContext fjo*-» ^viili it. 

Q 1.1. When a session U miiriiik'd.. ii-i HttpServletRequest goes with U. 

O E. IT an uhjed is added Using HttpSession. setAt tribute, ilu- objecl 

uiiai l«- fieri alia able In updei tit h«? ufatated Hi W wavcj m the 

1.1 1 In T. 

G R Jl" sin object is added using HttpSession . setAt tribute, and the 
object^ 1 1 ii.i.i I j i » r-. implemented Serializable . readQb ject and 
Serial! zablo .writeOh j set, unH the session is migrated, (lie 
container will invoke thews readObject and writoObJoct racthods. 

O (.J. Jl' a session attribute itnplensi?nts HttpSessionActlvationLisbener. 

tin- iimtiitnci's imiy fff|nipement is to notify (fetenen mw the vision h.i, 
been activated <m the new server. 
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\ Java El£ deploviiu-iit desetiptur din-lures several fillers whose L'RLh match a 
gtvi ii request, .Hid sfe declares H-virM fitter* whose <aervlet-nanie> tags 
1 1 . . 1 1 1 1 . the husk request 

What ttaiemeiits arc true ahout tin- rules that tht* eoniairu-r Uttej to invoke the 
filfcriiii fnr ihul rtqUeit? (CtloOw dial apply*) 

Q A. <. ) uly ihe ^servlet-nama^ tnatdlled Ditors Will be invoked. 

□ B, Of I he URL malrhcd filters, only the first will be implied. 

□ ( :, OF 1 1 in <servlet-name> matched fHt*ri, i inl y the first will bit iiftMEsJtedl, 

□ ]). The <Bervlet-itame> tuatchcd filleri will be invoked before the URL 

matched fillers. 

Q E, All til" the URL matched filters ^ill be mvefced, I mi the otsder of 
invocation tn undefined, 

□ F. All af the URL mittdird filters will Ijc invnkrd, to I he order in which I hey 

appear in the DD. 

When roinparui|j servlrl initialization pnrameirrs to context i m I ia ligation parameters, 
which are true for both? (Choose till that apply.) 

□ A. In their rtapecthre Dl'J tags, drey hmh have .1 <paraio-nanie> and a 

<param-value> tag 

□ B Their cefpeetitie UI» tag? as* both pi a red dingily muter die <web-app> lag 

□ G. Their respective mellmd* used lf» retrieve inilializii.i.<m parameter values are 

both called getlnitPar ameter 

G D, Bmh ran he direct h nerved IVt >iri wJSR 

Q E< < )itly changes to context iniiializaikhii parameters in the 1)1) t-ati In- .<>. < riwd 
\% ii lirnti redeploying ap|ilieaiirni. 



A JSP develope. wants to inrlinh- the e< mien is <>l" ilu- I "i 1h - copyright . j sp 
into .>ll prifflaryJS? pages. 

Wlii. h mn haueaiis 1 an do diis J i h,nw all dial .ipplyi 

□ V <jsp: directive. include file*" copyright . jap" /> 

□ Jl <%@ include file- "copyright . j sp" *> 

□ <,. <%@ page in clude=" copyright . jsp" %> 

□ l ). < j sp : incl ude page= " copy r i gh t - j sp " /> 

□ E. <;jspr insert filc=" copyright . jap" /> 
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You are developing an application to manage customer acCouqt* (bf a company lli.it t>il i ■ r f- 

phone, caljl' , .mil Ininnci icrvict'i. Many <>f ihe page?, contain a search rniuiidnality. the 
search \k>x ihould HM>tt 'lie same on every page bul SOfae of (lie p*ge* should limn the 

?ir,tn li In miiIv plnmr, i ,ili|r, in lulrinrl ACMIUtttK 

Given a separate JSP named Search.jsp: 

1, <form action-V search, go" > 

2. Find S { pa rajii. accountType ] Account; 

2, <input type= n text" name-"seatchTexf '/> 

3. <input type-" hidden" natne='" account Type" value=" $ {pat am. accountType) "/> 
3. <input type™" submit" value-" Search " 

4 . </ £orni> 

Whiti tag should you use- in a JSP thai nc-cds. ii» search fur cabk account*? 

U A. <jsp: include p age=" Search . j sp 11 accountType- "Cable "/> 

Q P. < j sp : include page= 11 Search , jap" > 

<jsp:param naimB=" accountType" valua="Cabla'7> 
</ jsp :include> 

□ <:. <jsp; include file- "Search. jsp" accountType="Cabie"/> 

□ 1) <jsp: Include fils= 0 Search , j sp 11 > 

<jsp: attribute name-" accountType" vaIue="Cable"/> 
</jsp:inelude> 



While tenting li^v various tags and ScriptTcts work, a developer creates tin- 

63 roiiowfogjssi 

1. request. setAttrlhute ( 11 name " , "World'' > ; %> 

2 . <! - - Test 

3 . <c : out value= ' H<s ll-o , 5 { name ) ' /> 

Much to ihr developer's surprise, die browser doesn't display anything at .ill when 
her JSP Ls retrieved. IT the developer viewi the HTML source tin page, what 
will she llnd in the output? 

□ A, <!-- Test --> 

□ li <!-- Teat --> 

<creiut valuer Hello, ${narae] , /> 

□ ( . <r-- Test --> 

<c i out value=' Hello, World/> 

G I). No output 
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A dating services .ipplH'-ation askn its single users a serie* of questions. A session neaped 
jdi limit- catted compatibility Profile n\ up. HashMap already tpats } into whidl each 
sulimittnl (|Ui-s(iim ID .md imswei part Brt ltor<jd ( 

Given: 

22. <% ( ( java .util , HashMap) requeat, getSession () . getAttrlbute { 11 

ecmpatibilityProfile l, J } .put ( 

23. request.getPa^aitifiter(''questiQRldSuljmitt6d 11 ) , 

24. request, get Parameter ("answerEubciittcd 1 ') ) ; 

25. %> 

How eta this h*- repfe&d wiilmui using sn iptlein? (Choote nil thai apply) 

□ A, <c:map targe t= 11 $ { compatibility Profile } " 

key= rl $ { pa ram . ques ti onl dSubmi t ted } ,r 
value- 11 $ { par am . answer Submitted} V> 

□ 15. <jspruseBean id=" compatibility Profile 11 clas3=" java .util . HashMap" 

scope=" session 1 '? 
<j sp : sq t P roper ty nama= 1 1 corapa tibi 1 i t y Pr ofile 11 
property- 1 $ { param . gues tionldSubmitted } " 
v^ige="$j param , answer Submit ted) " /> 
</ jsp : useBean> 

G G. 5 { compatibility Profile [param , cpiestionldSubmi tted] = 
param . answer Submitted) 

□ H <c:aet target^ 11 ^compatibility Profile) " 

proper ty= " $ { param . que s tionldSubmitted } " 
value=" $ { param , answer Submit ted} "/> 
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A [H')frr;iiiiiiicr i* EWMktnlg'a filter lor .1 JuVit EE Weh rt|iplic~.itti m. CJjVCfl the following rode: 
7. public class My Filter implements Filter { 

S. public void init(FilterConiig oonsiig) throws Fi 1 terException ( } 

9- 

10, public void doFilter (HttpServletRequest request, 

11. HttpServlotRe sponge response, 

12. FilterChain chain) 

13, thiows lOException, ServletEx caption ( } 
14 ■ 

15. | 

Wh«l chang*(») are necestarj to create .i vjslid filic-r? (Choose all thai apply.; 

d A. No changes arc necessary. 

□ H. A destroy £) method must be added. 

□ (.:. 'I'hi- doFilter () in t-L hod's body ran si be t: ranged. 

□ D. Tiieinitf) iiK'Lhgd'si siijiMimr mus( t'lkHiiKff)- 

□ E. The doFilter O method's ai^Umertts mittt be changed 

□ V. l b' 1 doFilter () nn'tbnrl% ot< eptkmi mtttt be chimed. 



Yiiur company wmte i" iininHi' .i *phi*h ftsgs, SplashAd. jap, ie advertise other eocipaay 
olTrrintrs In users its dicy first enter ihr site. On this new page users will br given the option t r ► 
click a rheckbox on the ad page that says"]Jo not show me this otfer again" and click a submit 
button that says "Continue to My Account' 1 . If the user submits this form With the checkbox 
checked, the receiving Srrvlct sets a Cookk with the Bame of 'skipSplahhAd"in the User's 
browser and then control back t<» the rojunJSR 

The main J.SP will be responsible lor forwarding the request to the splash pagr W'h.ii snippri 
can be added to the top of the main page to send the user to the splash page if they have not yet 
»L-lt% ted llir ilicckhox In .mml the .id ujlfi? 
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A priinL-.siiiniiT mmbiu implnm'iH .1 servletContextLis tetter, i Vm-h \\u- ft ij lowing DD 

101. <!-- insert tag! here --> 

102 . <parara-name>myParam<:/param-name> 

103. <param-vaLue>myValue</par am- va lue> 

104. <!— close tagl here — > 

105. <listener> 

106. <! — insert tag2 here --> 

107 . com . wickedly smart . My SCListener 
~-0&. <\ — close tag2 here --> 

109. </listener> 

Ami 1 1 1 ■ -h listener (."lass pstudfr-codci 

5. // packages and imports here 

6. public class MySC Listener implGrmants ServlotContextL is tenor \ 

7. // method 1 here 

6 . / / shutdown related method here 

3- I 

Whit 1 1 are trur? iChonsc all that apply.) 

L} A. Tin* DD fragment n*mmt be v.iln! 

U U. I i 1 1 ? I sfidiilil In <contoxt-param> 

Q (!. tagl *hould I »r <servlet-param> 

O I.). liLjj^ sli'iuld l>i <lis tener-class> 

Q K. L'ig!2 should be <sarVl«t-contQxt-class> 

□ I nn-llnnl I 4ifuld In initial iseListener 

G < J , ii Lf 1 1 tud 1 >hu nil! in- tuu Ltsx L I ni Li <il i ted 



you are hero ► 825 



coffee cram mock exam 



The wkkcdlysmart website bm ji rulidly 'deployed J. lvh YA\ mfa applkatiw] and 
Depbytneht dracriptor thai contains the following 

<we 1 ccflie -f il e - 1 i s t> 

<Welc™e -file>we ICCri&O . html </wel cotae -file> 
<welcome-£lle>howdy htral</weleomfi-file> 
<welconie-file> index . html</welcome-flle> 

</welcorae-file-list> 
A portiotl of ihf Web app'l difi'i ini v structure U.tuks like this: 

I 

| — index .html 
I 

| WOlCOIOG 

I I — welcome . html 

I 

|- — foobar 

| |— howdy.html 

[I the application receives the fallowing Iwi requests; 

ht tp : / f-www . wickedly smart . c om/My Web App / f oobar 

http ; / /www . vf ickedlysmar t , com/My WehApp 
Which st'i ui" responses will bt? served? 
Q A howdy, html lln-j] p 404 

□ IV index . html 1 1 n-n ;l 404 

□ C welcome .html i hi-n . i 404 

□ 1 >. howdy .html 1 1 1 ■ i . index . Html 

□ K howdy.htnaili.-iiwolcoma.html 
Q t ;. welcome . html i In ii index .html 
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Yrmr weh application baa n valid cicl with a single <securi ty-ccns traint> kt.;. 
U'idhn lliis tag exists l 

- ;i * ingle Ik i]i method that declares GET 

All of ihe resources in your application exist within directory! and 
dircctory2 and the only sfefuwd miles are BEGINNER ami EXPERT. 

If you want to rsstrlcl BEGINNER-, from using resource^ in directory£, which 
are true uhmii ihe urt and role tag(s,i ymi should divlaiv.' i( Mmhki' all ili.n apjih 

□ A. A single url lag should declare directoryl and a tingle role lag should 

declare EXPERT 

G II A single url ta*g should d eclair directory 2 mid a liagfe mle tag should 
declare EXPERT 

□ C. A single url tag shuuld declare directoryl and a single role tag should 

dec la u BEGINNER 

O I )- A s'mglc url fag should declare directory^ and a single role tag shuuld 
declare BEGINNER 

Q R. Our url Lag shuuld declare AMY mid ii* role tag should declare EXPERT. 

and another url lap should declare directory^ and its mk* lag »h ni l 
declare BEGINNER 

Q I-'. ( )n< iii'l liL.u. shiuild declare both (BpectorieB, and its role tag jhodld declare 
EXPERT. aric»llier url tiig slmuld di-( lair directoryl and its ml*' ia^ 
should declarv BEGINNER- 



you are here i 827 



final mock exam answers 



3 



A programmer has a validly configured directory structure for hfojava EE wfcfci 
;t]ip!i< inn which i* called MyWcbApp. In which two directories could a fi!r i ;illril 
myTag. tag n".i<l<' in nrdt'r to In n irrucd correctly l»y I hi* container? (Choose IWj.) ^ 

□ V MyNebApp/WEB-INF 

□ B. MyWebApp/META-INF 

□ C. MyWob App /WEB -INF/lib 
SJ^l ). MyWebApp / WEB - INF/tags 

n ,. , i -0p±iom D and F" 1*5 file* MUST be looted in 

□ K MyWeb App / web - iwf/tlds A, ad^Wy 4* 

L3 K MywebApp /web -INF/ tags /myTags 



JSP ^ 

Which nl" i\w Ibllow inji are legal KL? tdhoOW all that apply) lC ^fe 

sTa WW 

□ it. ${1 plus 2K0tf m B P Li * ™l *i EL <^W 
13 ( !. ${1 eq 2} -Oybc* C * *alid, ^ abt 

1 1 $ t 2 div 1 1 -Ortio-. D vafid; j^, 

□ K ${2 t 1} -Ofiioik & & is hot $ wjjid EL oferdtur, unlike && or 3r,d 

□ E $t "head"* "first" } -Oft* P V» ttht ^ate*** 

+ eof*-*t* EL Vail* W bocrte. 
the £trm^ ifltol into type thifa 
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A TJ.D from a Java Torum w?bsite Contains this tag definiijon: 
<tag>s 

<nams>a va tar </ nawj> 

< tag -class >hf . Avata rTagHandl er</ tag- c la s s> 
<body-con ten t >erap ty < /body - con tetit> 



<attribute> 

<name>userld</ n^me> 

<requi EHBd>ti:iae< /requi z ed> 

<rtDxprvalue>true</rtcxprvalue> 

</attribute> 

<attribute> 

<nan>e>s i z e< /name> 

<r egui r«d>fa 1 se< / r equ i re d> 

<rtexprvalue>£^l s©</'rtexprvalue> 

</attribute> 



~0pW A" He handler should 
rlort '••■2J even thou^ "tViC tij 

i^a^e doesn't alwy* re^e rt 



</tag> 

Whai is true : l1 h n 1 1 A', ai.a'lanH. indict. .iHHiiniins it I'Virnds 
ShnplcT&g^a|>pon andoutpuu HTML i Ink displays a ustr's avaiar 
mMgc? (ChoofC all ihut apply.) 

\. Tim' i las* should h.n r ,i ma lurrnltfi lull) a1 LmsI a stiller Hid hod 

Q 11 No size variable L» needed in the code because the TLD states il 
i- 1 1 ■ - 1 required. 

C An overridden doTag Itfc^yde method k needed. 

□ D. An overridden doStartTag lil< i yilfc mefhtid is needed. -fiytion D ! doEta^tTaij is 

O K. The class must overload all implemented lileryeie method* will) ^ 
a M'isii.ii thai includes an r-\ii.i p.naint-icr l't»r «-vm utirilrtitc 

dpniien in tin' Ti-i ' li> Mils t asr liit n- is itiilv Hini-. rt_r.. r_ i. ' l , /■ 

-jjT*£* t there » *fy ^e fefewfe method 

fc* JlmT .| e tag h*,d| erl a*d a*y overloaded 
*£r SwlS t e by tlie ^ w 



-Opton C won't 3"o«plitli 
anything wmde 
thii And fvovide the 
needed behjv<or. TWe <s 
J default implementation 
i* a^pleTaja.p^ ^ 

d«*l reiki fig, 
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A Servlet sets up a bean bdorr forwarding l<> »JSS ^ ^Q^fc^ 

■* Giwi: 

20. foo.User user - new foo.tJsern; 

21. user - setFirst (requafiL . y=?L?j IOmeter ( "fir stMame") J ; 

22. user.setLast (request. getParameter ("las tName") J ; 

23 . user .sets true t (request . gctParaiuGter { "street-Address" } } ; 

24. user .setCity (request ..gctParaineter ("city ") 1 ; 

25. User .setState (request .getParaineter ( "state"! ) ; 

26. user .setZipCode (request. getParameter zipCode") ) ; 

27. request. setAttribute ("user", user); 

What snippci. if pi i. ■ ■ ! ;n iJSP, could replace ihc Scrvlet code above? (Choose all thai apply.) 

□ A < j sp : useBean id- " us er " type- "foo. User "/> -Opti™ f, a^i d beting the type 

n , attribute whith requires that the 
J Li. <5 S p: US eBean id^-user" typ^-foo . User "> * alr^dy We d te ^e J*l 

<:sp: S etPr epe rty name^user" property-" * -/> E«„ thty u«d Ue da* 

</ jS p : useBean> * Wd ± {Jft^ ^ 

M (J. <jsp:usefiean Id- ,h user M class- lr foo ,User"> a " the bea^i pv-opetrties. 

<jsp r setP toper ty name="User" proper ty= "fits t" pa r am= "firs tName " / > 

< jsp : set Property name="user"' p roper ty=" last" p aram=" last Name " /> 

<jsp: setProperty naiiic="user" proper ty="s tree t " param="strcetAddress"/> 

<jsp l setProperty nainfi="uaer" proper ty = "ci ty " /> 

<jsp: setProperty name- "user" proper ty ="s ta te" /> 

<jspr setProperty name- "user" proper ty-"zipcode"/> 
</ jsp:u3eBean> 

1) <jsp:useBean id-"user fl class-"foo.User"> 

<jsp : setProperty name-"user" proper ty-"*"/> 

<jsp: setProperty names" user" proper ty= "first" param= "firs tName "/> 
<jsp; setProperty fiame="user" property^ "last" param^ "lastName 11 /> 
<i sp : setProperty name="user rl proper ty=" a troet" param="s treetAddress" /> 
</]sp:uaeBean> . fr , , , . .. _ _i.ft.___u,-. J.,., _,__; 

be used to ^? parar-tter^ fc> bea« rrefeirfces *hen W 
.a-.es d= «t »iUH F*r 4fe ^a-ettr rJ-^« do 
■tfUfc. ^cferbp"*" <» be ned to a*Uakully 
pais the- all into -the bean. 
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When comparing the benefit*, limitations, and uses of a business delegate object ^"'jio-'W 
and a srrvjre locator object, which are inn-? (Choose all thai apply.) 

^v,t Wft typully the IttAtfM ddeyte will a* 
LI A. I hey are equally likdv to nuke nenrork calls. ^ ^ ^ , fill. 

□ B. They nn- equal!) likfh to invoke method* in a transfer object, -Option 8 typicaffy the 

□ (.'. They lire i-<|Uall\ likrh In If- inY«iki d dfi <■<. \ \) I'm ii ii ;i ci ml i < illri object. » i*-a>il(er ebja^^ ^ ^ 

0""l). The service loiiiiior will typically 1^ considered a server to the busing -0ftien C -Lyri^ty ^ e 

delegate; don-b^let i»ake» re<\i<«k of 

I'.. When lii nil air iniph-niuiti-cl witb a cai lie, ikita sraltfWKs is a bi^ei ^ ^'^^j^u'^^b'JintH 
issllc for the hi»i,i,-« delete. Jj^ • ^ 

of the it™<* lowV 



When creating session listeners which arc true? (Choose all that apply.) t 

□ \. Tl,,v art all declared it, tb> DD. * Ht^^*^"U^ ^ l^'S* ' 

it i»t deilW .« the DD h * * 

a H Not all ol ihcm inusi tie declared in the DD, 

□ < ■.. The DD tag used to declare lb em is <listerwr>, ^Pfk* & «eV e iw^* ^ 

this out ^|L,.i - 

□ D The DD used hi declare them is <sessi™-listener>, * 
eT I. The DD tag ifted to declare them In placed wihin l L i . <wab-app> ia K , 

□ k T],« DD tag used to declare then) i* placed wjtfcft the <servlet>i^ -Of^F H^k n^M 

U» ifin "-any sfrtlfts 

Some Uf£rfi have complained thw strange thiog»*tt happening when thfi) have jsP <7-0 sett>o»< 
two browser windows open nn a single machine and licit Ii windows access ihe Ser^tet ^" ^ l0 " 

application at the snmc time. You waul to tc&l various browsers to sec il' a session ^ )w ' ' 
would be shared acrosi multiple Windows, You decide to do this by output ling 
[In JSESSIONID in a [SH How cquld you accomi'li-h 1 1 1 1-. assuming vmi ba¥e 
cookies enabled mi your tesi brovisers? [Ghotwe all thai apply.j 

□ A. $ { ccokie . JSESSIONID } -M™ A * C*** % ^ w ^ *** 
/ referees b> ihe C«d<'< obj«t ^ rb ™* 

SI Ii S{ cookie. jsessionid. value} 

S t cookie [ " jsessionid 11 ) [ "value" ] } 0j c D( £: ^ ^ ^ ^^.^ 

[3 1 It S [cookie- JSESSIONID [ "value"] 1 **j E ^ 11 * <ff Cookis objeftj. 7W optiow 

ST L. $ ( GookiG [ "JSESSIONID" ) . value } jetlfrfctf} ™etW. 

□ ]■'. $ ( cookieValues £0 ] . value 1 ^be* f- tookie^ws ii an EL 'uupkii dbjefit 
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Wmeti implicit Object cm\ Access U)l- atuihutt-s IWijii 1 1 ■■ - ScrvletContext 

□ A, server 0?W h B, i*d E m 

□ n. context _ ( ^ )cri C is ,*lcrr*it tea** tt* 'wy*esfc' Nj-tot ^ j^j ftd „ eS ^ jy» 

□ ( :. request <%frt «Jy steins Tt^eii-stoftd *ttHfe*U* Jwffofifc Jfyti* 

rf 1 >. application ~ f M™ P " £<*r*&L The wliuW 
LI I-.. servletContext 



u In 

9 kT 



Which methods cxi.nt in HttpS&rvXet^ (Choose all dial apply; 
A. doGet 
Bi dcTrace 

□ C. doErxor -Ofb* & tart 3. HTTP ERMR ^tW rrtW 

□ a doConnect ^Oyt™ D HTTP » CONNECT ^U, 



Vim have dt tLi nuneid thai ciertain capabitilin in \<iur wi-l* application will require thai 
usfrs l><- regjMered tin-minis, tn addition, your wefc appffe adoti sometimes deal* with u*ei 
darn ih.ii ■.' wen warn you to ke«p conjSdential 

Which we tatc? (Choose ull thai upply.) 

O A. You can make transmitted data cuniidtriitiaJ only alter your application has 
wn£ed the owfe pswwwwd 

□ B. Of the vafiou* types of audteatieatioii ipntfanteed by a Java l-X KditaSner, only 

U W< r > i „ > • > ■ , 1' i'ii (I ii: :ni|i|. II., rin .l In rn.ih Iiiiim ; 2 h-. ! ii. -im- K, .1 

password. 

(^T"c N" matter what type of Java KK attthentltiatns mechanism jsou uafej it will only 
he iu-tivaui.1 when m otherwise coflstfafaied return' n-cun-sird. 

O Dt All Eif 1 1n Java MK sfiiaranteed type* etf authentication provide stfortjg data 
scCLlfity willimil ll 'rd lii 1 r 1 1 1 > 1 ■ 1 ■ 1 > - 1 1 f v i,j ,| „ „ i [,,,, .,, j|>, tratitres. 
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Given tin - **- tr&gnltttfs fmin williin a single t&g in ft'Jai'a El', 1>1 J: ^ 
343. <web~ re source- col lection> 

344 . <web- re sdurce-name>Fteeipes< /web- re source- name > 

345. <url-pattei:ri>/Beer/Update/*</ui:l-pattern> 

346. <h t tp -roe thod>PO ST< / h t tp-me thod> 

347. </web -resource- col le c tion> 

3 £ 7 „ <au th - cons tr al n t> 

M | . <role -name >Member<,f role- name > 

3 6 9. </au th -cons tr ai n t> 

■ ■ » 

385. <usar -da ta - cons t rain t> 

386. < tr anspo r t-gu ar an t ee>CQNFIDENT IAL< / transport- guarantee^ 

387 . < /user -data™ constraint- 

Which are true? (Chouse ull that apply.) 

Q A. A Jam III 7 , DD dati cimLain n single- lag in whidl nil ef thw tags run legally co-exifil 

^ |i. fr is valid |i>i mew instant** «4 <auth-constraint> to otifl wjlhiia imglr i.u 

rlcsi ril H-rl alxnt-. . , 

-Cation $ S <*&rfrity-fa»*fcr**>t> 

□ <:. 1 1 is i stKd for rms« instance* u|' <usar- data- const ra±nt> ^ ^,j S £ah dedare c*ilf a «njle 

io 4'sisi ^vir hiii th« raagle »g dcic^&ii *b*Wfe ±™ ^jf jgfcg integrity 

I). Ii i-. Milid frtr irmsrr inslaiKt:* ,l1 <url-pattern> |c» r*wi witttiq <!tr 
< web- resource -collection tag d^cribed, abiwe. 

It is valid lor nther tflg* of thr »amr npt- as tin- *ins*l< - encasing [an den Tilled almvc In 
fowetlw >:irm- <url -pattern.^ th* tag &b«y$, 

2T K This feg Emptiea thai wtM^Owi, auHimiiraiiu... a„d data mt^rity purity fetfuK* 

fire all declared lor the woh application. 
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\raii .in- citeatmjaJSP Documtiit tlisii ^-uti-aie^ n dynsmv >\U image wfudi 

12 is n |nt>i(-tnftl by an XML ttoetinttrnt structure. The JSP must diedar* ilu- 

HTTP respfin^ hrftdfr ■ Can tent- Type ' ,i- 1 image /svg+xml • so thai -Option A it s^^ttt beuutc tke 
i hi "i 1 1 hiow-K r n ill n iicl< r iJiv ri i|iii[Uf >m nu SYlJ ini<<i^'. ttjndjird J£P Jn ^.i nr iynr^« 

Which JSP code snippet declares thai this JSP Document k an SVU response? p^^^ '* ^ " a!id in ^ 

Q A <%@ page contentType= ' image/svg+xinl ' S> 

□ U <j sp: page contentType^ ' image /svg+xml ' /> _0pfc™ 0 « iiktorrttt beUusi 
La C <jsp : directive .page eententType» 1 image /svg+xml 1 /> ^ ^ JSP p 0 ciM»«r , b- 
Q^j] >. < j sp : page . cotitetitType>image / s vg+xmK/ j sp : page , contentType> 

P*y a V* opiate -t*M JSP D*u^„t ^ j& Do^*U 

< Jiven in «,jSi* pa*-, the line: JSP * l£> I** 

13 <% __ cut .print f "Hello World"); — %> fct 
What is tin- II I'MLi.utpul? 

□ A. Hello World 

□ B. out. print r'Hello World"); 

□ C. << — Hello World — > 

3 [). \.-. niiipui » generated l>y this line. 



let 1 

. Whict) iiatmnents about HTTP session support are true? (Choose all iliat txi^i 

14 apply I 

Qfl \. Juv* EE conlumcrB mu.L support HTTP - 0pt«m B WKL "s*.tJ*J rt jUt i^ 

n at the *allb«k «t WWW 

LJ R Java EE container* miisl support URL rewriting ^ ^ N0T a £on tai«rs 

Hi.:. Javii EE cnniHuicrs must ivp^m the Srcuirr Six -lie is Layer. 



U Java EE containem mu*i luppon HTTP Mssiont, evwn fof diem* that 

rjt) mil HUppnrl Minkies, 

Q K. Java KK containers must tveogntee tin' HTTP termination signal that it 

i*Mte<1 i» indicate th;ji n i lif ni si-ssitm is no longer ndSw, , c. ^fTP hS 1 '' 
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Yoni rompaiiv ha* oukIjiimiI .1 I'mii-M' fur a diird party JavaScrtpl 
library fiir commieting mmus. Vbttr lemn bftft run into emintle** errors 
by rrmiakmgh misusing the library and the u^.-r-s are, insisting that 

CCTtAlU IIK'lIll ilrNli ^lnHllll miiU Ipr * iiiljk In Umi» uilll 1 1 n' .ill 1 1 n >| i/i-il 

security role. A custom laj; lihrarv usini> Simple lag handler*. Limkl shield 
developers from making syntactical JavaScript errors ami provide the 
security features the users desire, 

After 1 a design meeting, your team lend documented that she would like 
tlic menu to look like the following: 
<menu : main> 

<roerti4 : headitew text- "My Account" url""/nyAccount ,do'V> 

<menn ; headi tea tex t*> " Transac ti oris 1 1 > 

<menu: subltem text=" Incoming" url="/inaomingTx .do" /> 
<TDcnu:sui>ItQDi taxt=" Outgoing" url^'/outgoingTx .do"/> 
<menu: sdbltem text=" Pending" url= rl /pendingTx .do" 
requireHnIe="accountant"/> 

</nienu : head! tem> 

<jEG>nu Lheadltem toxt= "Admin" url^"/ admin. do" 
r egu ± r eRo 1 e« " admin 11 /> 

</mQiiii:main> 

You wish to put the lull responsibility of generating output on the 

outer <jnenu:main> laff handler, assuming that centralizing the display 
lujjic will tie easier to maintain, The qutef lug handler will need access to 
its descencteni tags to accomplish this. Which of the Eollowuuj options 
provides the best appi-oat !: ' 

A. Evety inner laff should register itself directly to it* immediate parent. 
Ihe immediate paieni out ilmr its tliiklrril in an tittered u ittct lioil. 



□ 
□ 



t'i 



Every inner tag should register itself directly to the outer tag handler, 
and l.lic outer t.i^ handler can Stow th-em all in a sittglr Hash Set. 



■I- 



i i ■ i ■ i 



□ I) 



iindDeseendentWithCLasa O ;md getChildren C) whtcji ^ i \ r 

the main ante* tag lull access t" ii >^ children without any extra 

coding iH't rssary. 

Have each inner tag saw itself is p pa Be scop«l airrihutr- with it« text 

value 1 1 f Mm attribute key. 



-0pW A ii *«*>?^*t 
» ii ft-tate a 

b> ill it ^ 6tM»6t*i by 

tke «tev taq a„y il*e ha* Ik 
inner b^s jrt structured- 

-Option C thtse melW* 
tWt r*>tt Only 

fr«- tke API 
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jsp " j i-° Ki ^ on , [ 

VVfcfchJSP HS'i' i >r lf phfls* [<iiiv an HTTP Silt) Statu* code to I nr- rfejturticd r>n 
If) .1 ivi|insi ttfia JSP p^ge? (Cbeto)|e nil thai apply) 

M B; Exi-i uium of thi scmcc mcibod -^wri B « £m . et ^ 

,□ Ci. Execution of the destroy method * J£ P b f h*»Jfe? I^K ""^'T ^P*** 1 

19 1). Execution od (he iratialwauon method 

u«t am i see «w «^ ,„„ t tkt Ja> ^ » JJ 



Civt-ii that session i- b reference to a valid HttpSession and ,r nryAttr M is API, w*>* 

if the nairn.* of iui object buuud to Session, whluh can be nsL>d to unlhiid objeel - 
IVipOL .i *i-ssitin. J ChoOM that -ipply.l 

U A, session .unbind () ; 

session . invalidate 0 ; 

□ i.;, session. unbind ("nyAttr 11 > ; 

□ U session. remove ("myAttr" ) ; £: a „«d 4* * 

□ E, session . invalidate ( "myAttr" ) ;objeit> b*wl 

^ 1 session. removaAttribute {"myAtfcr" J r^H** ^ W«wMtHM«P " ^ 

□ -fen unbind a tinde cbjett 

f;. ses si on. unbindAt tribute i "myAttt" J ; 3 J 



re* tjt J® 

Ir req is .t reference u> an HttpServletRe quest and there ih no current 
IS rainn, what is true abdui req , getsession ( ) ? Choose nil (hat apply,] 

□ A- Invoking Jpag.getSession (J ivuiiii ihiII. -OpW fS *nd ™ « iei 

□ _B. Invoking req. getSession (true) WlG return null. J r(w " * reat "* 
C, Invoking req. get Session (false) will return null. 
U Invoking req.getSes3ion () will return a new session, 

53 E. Invoking req -getSessiont true) will muni ;i new s^siun, 

□ V. Invoking req . getSess ion ( f a lse ) will return ;i new mission. 
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A (.'.husk tajf handler exists in legacy code. The author wrole a handler thai ,^jL ^.0 4f tt |OTl 

evaluate* its tag body .1 hundred times, to be u*ed m tr*dng etJtajr tagk thai * i^^'tV) 

produce random l ommt. 

Given: 

-0 6, public class Hundred? tmes Tag extends TagSuppert { 

07. private int iteration-Count; 

08. public int de-Tag (J throws JspExcoption f 

09. iterationCount = 0 ; 

10. return EVAL_BODY_INCLtFDE ; 

11- ) 

12. 

13. public int doA£ tar Body () throws JspExeeption { 

14. if (iterationCount < 1Q0H 

15. i t a r at ionCoun t+ + ; 

16. return EVAL_BODi_AGAIN ; 

17. J else { 

18. return SKlP_BOD^; 
19- ) 

20. } 

Vtfhai is tncormu akmt the t ode:* » ^ <* -to rfwt s&±e ,„ tw 

Q A. Tag handlers are nol thread sftfej sit Lhe iterationCount esq become ^ , 

mil "I' syne il multiple users are remhinti the pajjt .it 11 n- «:uiir i i ■ 1 1 1 - ^ ^nTj^y^prt ■* w»t J 

G J}. Tbe doAfterBody niclhud Ls never hemg called because it is nol part rcjl tlass- The doA-Fter&ndy 
ol" lhe l.iff Innidhu lili-L yi-Lt*. 't'he developer should hive intended the nrBvod is part of the 
IterationTagSupport <. la** t<> include this method I p L the tifec^l le, Iteration"^ iTiberfjie nr^th 



doStartTag of TagSupport is called which fimpl) returns SKIP_ -Offcoh C= sbnfhr tha*^ 
DODif. -mi-inn doAf t*LHody to n.-v. i be tolled -ctW ^ ihrnildlriji 

□ a VVfeo dsMteiBcdy rerama EV3U<_body_again the deTag mttirad n K^fiTui^J^ Tcf ^ 
called again. Tin.- doTag method resets iterationCount to 6. reaujtioc j/ , "* c f" 3 , ' 
in ,m inlmiii' lniio ,i java , lang, OutOfMemotyEtror i- iliiM^vn, J , , , 

doStartTjfj «-*e tha* cw£f 



you arc ftere » 837 



final mock exam answers 



20 



Givfin iIiin ftagsiefit frfim <t web application's Dp; 

72. oession - confLg> 

73 . <se95ion-tiraeovit>10</sesBioTi-tjjiieciut> 

74. </session-config> 

And gwEH that session is. jp rdfetcuce to I v;did HttpSession, and ihi* 
fragment from •■ serviet: 

30. session, setMtuelnactivelnterval (120) ; 

Attn line !tt'l exei tnes, is. - li ii h ate inn-r' (.!ln>ost' -ill iJiul upplv.i 
Q A. I In - IH) f'L\L!TiiTfui is nut valid. 

□ B. The invocation i.l' setMaxIn active Interval will untidily the value in -ff-fcio* B ihe mfthed 

I In.' <3ession-tinijeout.> tug. °i"ly flwrridsi the 

Q C li it impossible t<i determine ihr session timeout limil-. gjstaq the aiwvci 

Ql 1), 11 the container receives no client requests for this session in 2 hours, the 
container will invalidate the session. 

II the rt>nt;uncr receives no clicnl requests ibr this session in 2 minutes. -p^-bcr £ tV* 
the container will invalidate the session. jr^meivt for 

□ K If the con miner receive* no client requests for this session in 10 seconds. n»e-tK«i r '^ r<HTV ^ i 

tln> container will invalidate the session, ittewi, 

-the value m 4*e t*J 

O ( i. II tin 1 container receives no client requests lor this session in HI minutes, represen-U minutes 

the container WlB invalidate the session. 



i I a 

You have created ei valid directory strurture and a valid WAR Hie for your Javn EE 
21 Jflcb application. CJJven that: 

- ValidApp.var is Mm lunde <>r the WAR lile. 

• WARdir represents the director) lhal must exist in every WAR file. 

- APPdir represents the directory thai must exist in every web application. .^t 

3- *' T " 1 - **" ' * ™ T '"* nJ ' k - ft ^ «. «-W -HI 

2 It. I hr n;snii- ■«!' yniir application is NOT predictabtft the j^kaW by usimj the r|m 

□ 1 1. In this directory structure, APPdir will E&t inside WARdir. ^ ^ WAR ^ U ^ 

_l 1). In this directory structure, the application's deployment descriptor wiLI 
reside in the same directory li> WARdir. 

□ K. I'hiLtrig your application in a WAR lite provides the option lor the JJn+i t a WAR file 

container i" perli u rn additional runtime cheeks tioi otherwise guaranteed- .J cffcie* 

ttf perform adddicridl 

dafeH-EF tKe£kl 

S3S ippendix 
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Wlini corflptiring H I'"] T GET to HTTP POST. Wlffl U trP^ (Clu^sr .ill ih; t i rijjply.i ^ ^ ^ 
A. Qtili, HTTP set i» iaetapousU. * rf * 

□ IL Bi»ih require ,m «tpJini Uri-]unilliui in HTML l«>rni lagH. 

□ C. ( hily H TIP POST? can suppori multiple parameter^ in a single request, 

5if U Brtlh supporl single panmicUr requests thut m ini nuilriplr valws.-flptw J> Un |, ahl jj e 

G E, Only HTTP POST feqtiestt should be handled by overriding a servlcVs 

service ( ) method. £ ^ ,f 

the 'hsuld neuer 

«*er«nde "the semiteO *eB*4, 



tJ^rn t}Lis 1-ihtLt ill.'tsn\|. I: ^Fl 1 ?^ 
S2. String s = gotServlotConfig (> - go tlnit Parameter C'myThing" ) , 

Which M) fragment wiH assign to s ihr value "myStuf f "r 1 

□ A. <irvi t -paramo 

<pa ram>myTh lng< / pa tsm> 
<VaI lie >my S tu f f <; / val ue > 
</init-param> 

□ P. <init-param> 

< n aroe >my Th ing< / narae> 
<Value >my S tu f £ < / val ue > 
</init-param> 

□ C. <lniit-paraitt> 

<param-najne>myThirLg</param-Tiajiis> . . 
<psr«m-va lue>my Gtu£ £</pa E am - va. 1 ue> 



the <ihi^ fat .j Wl> ta* ' 



</init-paiam> ^it-fiir*^ ^j. 

O I>. <servlet-param> 

t name >myTh ing< / narae> 
< val ue >my S tu f f < / val ue > 
</servlet -par ani> 

O K. <scrvlet-param> 

<par am-name>my Thi ng</par am- namo> 
<par am- vi lue>nty S tuff </pa r am- v a lue> 
</serv let -paramo 
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tiivfii that a Stj"in ^ is &lni'i?d lis an attribute Einmed ac coun tNumbsr of soihl 1 i£ape t , j* -jag 

24 wtiicfa k ripiU'i.M uil] ouptut the attribute? 

irV" -Option A If Y°" ^ ^ use 

Ud A. <%= pageContext .flndAttribute < ''accountNutiibet 11 J ^l^yeb, tW* tke «a*i«ft **f 

□ H. out.print("${accountNujiLber} ") %> „ 

G CI, <ft Object accNum - pageContext. getAttribute ("accc-untNumber") jet elated 
if{accMum = null) { im\4e of r t !<• . 

accNum = request , getAttribute ("accountNumber 11 ) r Th\i is j n ilJe^l we 

} *f Unlets i^yvoiY 

if {accNum — null) ( is *W± tkinlt thu 

acetJuns = session, getAttjeibute("accountNujjibeF 11 ) r ji*fc a trick' 

if (accNum == null) { -Opt** 0 So tlose 

accNura = aervl etContex t . ge tAt tribute ( 1 1 accoun tNumber " ) wti *l etCotite*t ** 
J not 1 did H?fcBt 

out .print (accNura} ; It 
%> ten ui«d a^l>«tio« 

□ 1). <% requestDispatcher , include ("accountNuraber " J ; %> D : «)w^^akner » 

«t *. ^pl,c.t object if 

<t wre, tkis it just yrt-o^j. 

You btiive inherited n IcgacyJSP well application with \<>t* of leriptrag J!iP \Z«r*' 0 * 

25 codr. Your niiiiiHi^'i liiis c3«-t n;irifE<-<l i|i;>i vu-r) |>i C l>r- rHVirhurd hi renmvi- ittfeion 
•irnpiinil code He wauls. V(iu iii guanmuv llmi no strip t lei mile exists in 

ybUjr JiSP codebase find in h&Vc the Herb container enforce a "mi i ripling" 
policy. 

U'iii. ii web.xmi nuifigiiratinn dement will iHvontplisri this k^ial: 1 

□ ,\. <j sp -property- group> -Option A n mtovreil be£ji>ie 

<url-pattem> *. jsp </url-pattern> <ff^mit'««'^tiny »l a valid 

-cpennit- scrip ting?- f alae <; /permit- scrip ting?- configuration element 
< / j sp - pr ope r t y - group> 

□ M . <j*-oonflg> ^,,0,^^, 

<url-pattern> * . j sp </uri-pattern> < l-^Uto n * 

<peniit- BC ripti nej > false </perrait- S cripting> ^.^ipwL «U 

</jsp " config> ^WUk 

<j sp -property- group > 

<url-pattern> +.jsp </urL-pattern> 

<scripting-invalidi> true </scripting-invalid> 
</j6p-property -grcup> 

□ I). <jsp-config> 

<url-pattern> *,jsp </url-pattern> -£^t«» D is ittontti betiuse 

<s crip ting- in valid> true <■/ scripting- in valid> <js^-tw*f i& not s "Ji'd 
</jsp-config> tenf i^nr*b<^ element- 
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01, <%@ taglib uri-"http: // java, sun . com/ jsp/ jstl/core" prefix- "'e" 1 
02. 

03, <% 

D4 , javautil List books = new Java, util . ArrayList () ; 

OS, // add line here 

0 6 , request , setAttribute ( "my Favor i teBoolcs " , books } , 

07, 8> 
08, 

05- <a:choose> 

10. <c:whan test="$ {not empty myFavoriteBooks} '"> 

11. My favorite books are: 

12. <c;forEach. var="book" items="$fmyFavoriteBooks} "> 

13. <bt/> * S(book> 

14. </c:for£ach> 

15. </c:when> 

lfi. <c : otherwise> 

17 . I have not selected any favorite books . 

18. </c: otherwise 

19. </c : choose> 

Whiih ill' ih<- |< allowing liin.'s of cotte, if iiiwfttd iottepewdetitiy ;ii Lint* 3, will cause ihe texi 
uiilim ilit- c "otherwise tan t0 di-ftpta) ' t itloose ail (ha: apply) 

□ A. books, add("") ; -0fW A, &, P »" add ^ 

U H books, add (null) ; 

U < .. books . clear () ; e^ty Liit- 

bonks irM ( H H can" First") ; 

G K- books = null; 



™/ vwpis ut ^ 
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Vvu .H" wi irking tJti rat a ft nation that irmnau,^ a bu#ie*s Listing dirreinry. J£p * 2,0 sett"* 2- 

27 f - *t^^n 

*" Csives: 

30 . <c : if tes t= 1 $ (verify : isTollFrea (phoneNuniber) ) 1 > 

31. <img src= 1- /iJiiagcs/TollFrGO .gif " /> 

32. </c:if> 

33. $ { phoneWuniber | <br /> 

34 . </ e : f orE ach> 

The above mippel adds a special icon in honl of phone numbers thai are 
loll IVte. Which statement about the EL function from this code snippet is 
HfLjiifatiirt-d ia be tr«e? -Opb» A : all EL «*wm 

trV be detWd ?Mit siitit 

U A. The HL EUnction (trait be declared public and static 

n -Oyttor, & ,i sh«,|d return a boolejh uake 

LI 11. Im: EL Iniu-tinti niu^i not return ;my value and be dei fared void to rt t»* be wed by -fcKe ^ja 

□ C. The <uri> value in the ILL I imc linn's T1JJ nuwi be Verify C- Ur <^> «alne should 

LI 1). The name of llie class that implements the LX function must be . j^p, iirctb^t wtiith 

nann d Verify ^ 

\ was not shown- 

□ K, El' phone Humbet is a String the <function-signature> valuA^ 

in the TLD should Im isTollFtee (String) _£) p ^ p : ^ e ^ ^ ^ 

a mapped in £he 

W be detla«d It -d*> ^at al1 dia W" te dc " to **>kli any 

Wry talftffeL » Strtfl *«W te £t«*J paHfe.br nj„i n g twmim to 



- Which are methods i>l a ttp£ e rvie tReques t thai retrieve the bony oi ihc fFl 
i I'ouest? (Choose al! that apply.) 

3 A. getteaferf) ^ ge^^J reV.e^ th e 

□ I! getStrearaO ^ * data. 

Li (.". getlnputHeader (} 

gatlnputStMamO -OfW P ^ 
_ body as binary data. 

U Ei getServletReader ( ) 

□ E getServletStream() 
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Ci j H.-C-T1 a JaVn liE U.'cb Application in Which (In* foHdiyin^ hnrtvwr request; 

ht tp : //www . wicfcodlysmart , com/ MyApp/myDir/DoSomc thing 

will be handled by a servlct in tjbe application, which ihrrc arr true? 
Choose three.} 

tttf A. The deployment descriptor mtiM tOfilud* fcttr^lIBi to handle -C^"* A' * ^le^?F^> ^ 

□ U. Tin- request i :■ 1 1 [)<• bundled in Verified with no Mated inMrucltbrti to the 

deployment descriptor. 

□ C. The servlci (hat handles this, request musl be nnmcd DoSomethi rig . class. 

E^i ) Thf sen-lei nam« is uo| pjdictaWe b««d <*n the information provide* C Jnd 

□ & Tie application rnitsi coataffl .i directory named nyDir. DoSomtt),,,^ are 
K^t<: The name of die tifoemtri to which the wjrvlei resides is not predictable "^"J 1 J™** 



si the information pnniik d 



Your web application lias a valid deployment descriptor in which student and 
sens el air die only security roles thai have been defined, The deployment 
descriptor contains two security constraints that declare the same resource to 
l>e con it rained. The lirsr security constraint contains: 

234 , <auth-constraint> 

235, <role-namQ>student</role-namc> 

23$, </auth-consttaint> 
And the second security constrain I contain*: 

251, <auth- c on s tr a in t/> 
Whiith are I rue? i Choose all that apply) 

A. As I he drpioynirnt rirsrriptnr it:mds now, Ihe it aiN<r:iinert resource ran 
he accessed hy both rotes. 

O IS- As the deployment descriptor stands now, the constrained resource ran 
In' iircessr^l mih In sensel 'N-r< 

□ C As the deployment de»criptOi< stands now. die constrained resource ran 

he ateesfied entj by student users, 

^[ I) IT ihe seemid <auth-eons t r ai n t > tag if removed, die c unstrained 
resource ran be accessed by both roles. 

□ B. IT 1 1 ii- seen nid <auth-cons traint> tag is remuvei], the? rt unstrained 

resource ran be act wjed only by sense! users, 

□ I' If the second <au th - cons t r a i n t > Uu i- r .-moved, the -Iniined 

resource can be accessed only by student usn v 



«ly h> the W 



no wit* 
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j£p *l.Q \~^> 

Which nf ilir frvitnvi'iri^ ruMoru tags i* guaranteed to fuil? (Oloow; all iliai apply) ^ ttopter W 
<mine : borders 

<min e ;pnoto 3 album^S UlbumSeloctedl "> fr , ^"■*T* 9b,s> 

</mine: border > ii i*i fvoferly n«ffc*ii 

< /mi ne ; pbo t os > 

^ li. <mine; borders 

<mine r photos a lbum= " $ { a lbumS ele c ted } "/> 

</mine : border> n ^ , ^ 

-CftioM 0 t C, and D a |t 

□ ('. <mine:border> F°Wial|y k$sl „j^ ti J 

$ { a lbum Se 1 ec ted .title) tusk** tag». 

<mine : photos >$ { albumSe lec ted }< /mi ne : pho to e > 
< /mine : border > 

□ I) <mina : photos includeBorder= 11 ${userPreferanca border } " 

album=" $ { album$elec ted] 11 / > 

■Lit 



Y<W| (l-tiejf \vcli ap|!|itahon 11*69 IhcJaVB EE | J ■ - .ne ui'"a l\|tua|]\ mcil ^l^V 

j2 l*lwu MWsh Ml application warns (a ateew remote iTt;istrit's. Which irfe benefit) of 
thiwe patterns? <Ch<.msr ittl dial apply.) 

A. Increase cr,h<Wit. TV «tW web k*« »e the b«.*t* dekyte a«i ike ^ 

rt ^ IctaW By «iiM 6km few patW tsgtfhw. fc*pf*«wt 

J 15. Bfiii-r [ifrfuiiiMttWC frtrc fcused respmiibili-ties. a»-thii««nril ekA^t 

D^t:. Uriier .nainuiuahility *m -a.«tera B te e#"k wll be re^d- 

□ I). R»-diM-rfl ii.-iwiklialli. -Optimi D- if yo, pidlt^J J) rf 

□ t. Mere interactive browser capabilities i<™ee locator u ^ple^ted w ,ti, a tJiT^l -J^'j^j 

^ «w tjfit. if^r lissjcisrssf 

. c " ' ""-" t5 dlwiyi tcimc with 

t*etr owr, drawbacks, jo the Mpt *ta h dj,rd «Ui«, 

Wbai is Kener»Ily true about the luecvcle i*l a lerviet? iCIhjiw all thai apply.: *n. M 
I^T*A. Yhi sluinld NOT write a constructor lor a. scrvlct. 

□ B. You should NOT tAerride a seivlet i lftit{) meiliod. * Ort" 3 '* B and F are ^Ify 

wben a ttr*let needs to Create 

□ f 1. You -liquid NOT tpvecridt ,( Setvkt'l doGet O awrtbo^i, 3h j destroy reioufto u«d by 

□ 1 >. Ynu slmiikl NOT override H MtvltTt'i doPo?t{> m I se V letl ^ 41 datit3ie 

IS F- Y«.i! sbeiUd N'OT override a B*r>'let?« service tnetbixi. 

□ K V-.ri 4hjuM N( )T rrtvniflr 1 n sri-vlffv destroy*) riictln nl. 
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Givni thl* portion i>J" a Java liF, ,war (lie's directory rIliu Hiri. . 
MyApp 

I-- METft-TNF 

I-- MANIFEST, MF 

|— web.xml 

I - - WES- INF 

|— index .html 

I I-- TItDS 

| | — Header , tag 

Wfcsl bbangef^ .m«' u.-efssary to m;ikf ilii^ structure v.did .mil ilu- rtSbttrtei 
.n i -t-NsiMt-.' (Choose nil thai apply.) 

Q A.. No di^^J are tiEcessajy 

0^ m w^b.xmi Bte most Ik- moved. -OpW B «WJ **t b e fei wfcB-l^ di«tUy 

G (J. The Index . html Ltlo must he moved, -Option C ii Gtf, but not directly duesiiblc t» dieh-U 
IB D. The Header . tag file must be moved. -0p{>cm J)- taj files i»ust be in tine 
LI I. I lir MANIFEST. MF 1 1 ]i 1 inusl ho mwed. r 

Q R Tin 1 WEB- INF directory must be moved. 

moved. 



tore \Ut 

Yrtu arc considering implf-un-nimn *omc varim of MVC in your Java I.E. n-iitr ^ t £ 
application. Which arc true." CtuxMC tttl that apply.) 

□ A. Tl.i> aY*., .ill nh,„ ,r, busing d,lc*«c otyec* * ^ B; ^ ^ ^ 

□ II h ,,1'u-ii u-dui.r» unit. -i k n.illii I.) i. u hint; iriimtd) lusted dwui. MVC m^lcatU, tu-t MVC 

□ C. Tlii^ cJvsi K n goal 0t00)t tiqtwmfrkalitins with Wmgrm-ciiiM resmirn- Jt * tB 

rcui<itru-N. -Option C tjhw is ^ 

^ D, Fvni though MVC vilutiom have mam benefit*. iln-\ often iturcase * l«C*torijob 
drsipn complexity. 

5jf F. Both ihc front conriioltcf pattern and Stnlto cgwM be consirJcicd solutions 
for 1 1 tin desijni goal, 

O F, This design will provide you with the- capability to easily recombinc -Option thi* i* th' 

request and response handlers. of the interiepbng filter, 

wnith tan work wirbi MVC, 
but wnith is separate 
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jsp * i£ Ktii0n " 0 ' 

Given «n a JSP page, the line: 

36 <% List ayList - new ArrayList(); %> * u internet 

because the JSr de£Urab«> 

Which JSP rnct«* snippet* r.ni yrm \ni- rr> import (li^if* Haiti lypr»s J if !hr>rini» (wo I tawct be u«ii U> tJ g< | rt 

□ A. <ll import java, util . * ; %> i*-fwi ttatti-en'ta mtn W 
rt translated wvvlet twle 

LI B. <%@ import Java. util .List Java. util .ArxayLiat %> _ , _ 

M -t^ftion t? is intoerget 

Ijd C. <%@ page import"' java , util. List , java, util. Array List 1 %> because there li no 

□ 1). <%P import java. util. List; import java, util .ArrayList; %> JSF " dir «^e 

<*@ page imports java .util. List ' %> <4@ page V « "Barrett betaute the 

import= ' java . util . ArrayLls t < %> J£P detbraW taj be u«J 

ts inert i»^wt statement* into the 
-Option t a t e*-^£t be*a«* ^ attriUte J the Elated mM ^ 



You we tasked *wth oddtog levera! security featuttti in your company'* Java EE 
wrh implication, Specifically, you need in create several dasses of u$en and based 

i hi a user's- rlanHf yuu need to restrict tlicm to use only some of the application's 
pages. In order to restrict iicce&s, you must determine that users are who they say 
they we. 

Which Hre true? (Choose all that apply.) -Opto* rV you tan also 
LI A. If yi hi need to veritv dial uwrs ale who ihrv say tln-v are. p rntist use L_„. iii„ 



IT you need to verify thai users are who ih«-y say they are, mu uiii&i use Bvoavammatieally 
the application's deployment desi riptnr hi itnplminii thai rt tjuiremertt 



□ B. 



avrt EE's authorization i ap.ihilitics should '>•' ti*ed to det&Xnihe thai -Oyiion 0: tku -*,tth 
uers are win. tin-)- say tfaey are. „ ^e^^Z 

M C In order to In tp ynu determine thai users are Who dwy s:i% they .nr. v.m 
run tut* the deplwymeni dcJttti^Kort <logln~conflg> tags; 

□ D, In iiuh-i LtJ llrt|i yiu d'-ln niinr ch.il Usui i ,ur ^ In i (Ins **) llir; ,ni-, y,u -Oft"" P' "th" taj « uwii 

ran us.- the deplovmeni descriptor 's <u so r -data -constraiiit> u»gs, imple^t iiii "*it*pvf 

Dependhig mi the approach you M»e, determining 1 1 1- < • n^-rs are who thry 
they are niiglu ttquirr im hiding a "realm" 
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Street 1i 



\. 1 1 ii I is ;i J;ivh I'.IL ftflplitittiufl Willi a V$$4 dittci&t] frtrUCtUfc, \'ril][].\[.i|s 
conttttbi .iril" imiigr filrs in ihrrr Iikmihuis within 1 hr- Hinvinry alrucUirr: 

- Val i dApp/ imageD i r / 

- ValidApp/META-INF/ 

In bluett of llirsv locutions can dictltl cltrrclly access these .gil' files? 

□ A. 0[ih in ValidApp/META-INF/ 

□ C All i fl the above Wiitum* 

□ 1). UnK in ValtdApp/imageDiE/ .mil ValidApp/WEB-INF/ 

□ II Otih in ValidApp/imageDir/ .,m ValidApp/META~INF/ 



NP 

Given req is a reference m a valid HttpScrvlGtRequcsst. :itid; 

13. String f] a = req, gotCoofcies 0 ; 

14. CooJtiet] c - req, get cookies () ; 

15 . req sctAttribute ( "myAttrl" , " 42 » ] ; 

16 . req aetAt tribute ( l1 mykttr2" , 42) * 

17. String [] s2 = req. gatAttributeNamcs (} ; 

lfl. String!] 33 = req, ge tear ainetervalues ( "attr 1 " 1 ) ; 
U'lin. !l Ufics of <i uli- not compile? (CriQQie ;il| dml apply,) 
^ A. line I :i -Of^wn jetCookKsO rcfcw-M a C«kie array 

s ^ anJ a* Agrtfe ami as « i ~ % B> f<^f|f^ k '" d ** 

□ EX line H> ba«d4* *" Cbjeti coition, a«l «'« W: 
g;/'. ._ g«, «i$M; 4Va kin* of 

L " m " £ SeMttriMtr/ameiO * the nil e*a» 

□ E lim- 111 "*W #» E^ertti* 
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A Ta^ t ih? p ftrrjpri Products . tag dffiplajrs a list cii prc«jU£ta, ^ ^ j g <J 2_ 

40 

Ciiven this Miippct tmm the Tag File: b$ ^Qt-'50fl 



1. <%@ attribute name-" header" reouired""' false" rtexprvalue-"f alse 11 %> 
2- <%@ attribute name" "products " required"" true" rtexp rvalue- 11 true " %> 
3. <%@ tag body-content^tagdependent" %> 

Which of the Rdlottiog are legal usages r>f the Ifcg Rife? (GhocBw -« II thai apply.) 

<di sp 1 ay : Fr oduc ts h Ga de r = " Shoppi ng Cart 1 ' pr oduc t s= " $ { shoppingCar t \"/> 

□ B. <di splay : Products header="Wish I,ist" products~"$ (wishXist} " body- 
content- 1 1 5 {body J V> -Ofiwn B: body-e^^t l4 ^ a vflfld ^ib^e 

^ ( :. <display: Products he ader= 1 " Similar Products 1 ' products="${ similar Products J "> 
Customers who bought this item also bought: . 
^/display: Product s> -0^™ & A i* aUncd bei3u* d? We ^defender* 

LI IV < display products header=<S= request ,ge J tParameter ( "lis tType") %>' /> 

-flpfco* D prod^b * a retired at^but*. 
fllvjy header «*jy ^ hold a iinptiet be«we 
rt *«i def b*d wrtk ►ie^rwta If t to fade 



JSP attiW 

Vnu af^ taking part in an iaMattve in feroove scripget* fK»iw the JSP* of a legacy 

41 npijliratiiiii for » majew baak. Tfou wane itttttti the foflowuig line* of cod>i 

<% if ( ( com , your company , Accoun t } re qu e s t . 

gc tAttribu to ("account" } } . isPeraonal Che eking ( } ) { 

%> 

Checking that fits your lifestyle - 

<% * %> -Oflua, A f»d* the atfe-M* 

H<m can ym< rcplaen iliii using JSTL? (Chaotic nil tli;i( apply) rdned atiwl and 

d A <c:if isst= *i account. perscn-lChectLng J ->Cnsc*iiig '*P«" a ^ ,C ^ tkm 3 0 0,1 
that "fits your lifestyle .</c: if > * A«**-t ^j*t 

Ef^ 11. <c : if tes t= 1 $ ( account [ "personal Checking 11 ] } ' >Chedking -Pptiemi 8 9ni C notice iUt 
that fits your lifestyle </c: if > erHtr j.^e «■ double o^e* 

t :. <c:if test="$ ( account [ personal Checking ■ 1 ) ">Checking J * e 

that fit, your lifestyle .</c:if> ^ aj tllC5e ^ ^ 

□ 1>. <c:i£ test^'H account .isPersonalChBcking)">Checking it tf rt ii in enalipai«d 

that fits your lifestyle </c: if > Thii rule doesn'i Apply 

-0p^ p .ill leck ft* a ,etl JWilO«di*S JSM*y^% 
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( j ^ i'ii i in* fotlowing cveni types: " 

- HttpsessionEvent 

- Http£cscionBindingSvcnt 

- HttpSessionAttributeEVent 

Match ihr rwiw types above their reijpectiwe listener mterfecea. (Note: ytm ean 
twite h <m eveni type to tmbjis than mie Listener.) 

HttpSessionAtttibuteLlstener ....tH^^?. 1 !!^^ 

HttpSessionListerie* ^S^SSl 

HttpScasionActivationLtstcnar !t^f"£?£ ^ ^ pJ *' < U J 

H t tpses s i onBi ndi ngLi s tener , ^iMe«,=.piB 



Wlmfs true hIkuh the Kfeeyde ol a servlet? iCUumim- .ill thai apjily. i 

□ A. The serviced nierlnkl u ihe lii-si method invoked by the container -0ffcw« tV the ' nl t^ 

when ;i new request is reeeiwtl. method i* m*jked Wst 

□ 11. T he serviceQ method is invoked by either do-Post ( ) "i doGet(| -0^i 0 n &: the servietO 

after they've completed * request. 

bu C Ea< h lime thai doPost ( ) is invoked, it nuns in its nwti thread, 

Q D. 1 hf destroy (} methi>d u invoked alter every invocation of doSet ( ) 

YS K. Tliv con tain ei issues a separate thread for each clietii request. «**«ka. destroyO w he„ ,£ 

decides t, remove a j^lef 

, jgp v J,jD 1 1 ^ 

When ttlighl 0 JSP get tramliili d? (Vhow nil that Apply.) hS ^ 

a . -v «v m ^VXr^^i:^"! 

H. When the application b started 



c. The ii.M ii a iimt .v«,ues.s thejsp kifitfl de F l 0 w th< Jsp ei5«ra2lSe 

□ D. Alter jspDestxoy () is called, it gets rc-trarulal?d F"**"^ « * titcnt resist Igr the pjje 



to the gjftC pJ^e 



you are here > 



649 



final mock exam answers 

Given litis fragment IVom a valid doGet(3 method: 

45 

12. OutputStream oa = response . getOutputStreamO ; 

13. byte[] ba = {1,2,3} ; 

14 . os . write (ba} ; 

15. ReqUestDispatcher rd = request . RequestDt spa tcher ("my . jsp" ); 

16. rd . forward (request, response); 

Assuming that "my. jsp" adds die hyic* 4, 5. and 6 tg rli<- reaprmw, wh-.ii is tie rtstdt? 

n ; \ 223 

3 IV 456 *tput (IZU i* cleared, and forvtfrd ii fc«*ed I w.tk«t 

□ 0, 1234S6 e*tt?W if *-<W> kad bee* tailed teWWa,a. 
r-* |lk«tfl£tak£*« r 'ti<sn 1t,tc ' 1 ^ TCWn " 

□ ]>. 456123 

□ E. An exception \$ Lhrmvn 



A programmer need* to update a livr. running jervlet'i itntiuli/aiirm parameters 
40 ->> (lint die web applie.ilion will hegin to use the new parametria immediately. Vif I^M" 

lit order to accompltth thk Which must be true (although not necessarily _foti 0 n "fcbe <ini-t-fj*-i»> 
Miffinmt)? (GhoQM all 0»U apply) ^ ^ y, e 

O .V. Ktjf each parameter, you must modify a 111) lap thai spccilir-, i In- iimm' *iee w lei> ilfy *° t,H« 
of the lervlet, £b> name nf the parameter, and die new value of the <im-t— rart™> ta^ d«* n« 
parameter, ba« the lerirleii ha-e 

□ B H the scrvlct'fl constructor; tnusl retrieve llir Opiated DD parainrier In mi -Ofke* B Uti j £ 

i he jervlet's ServletConflg object. Ue £«rvJd£ohf i 5 objett u n -bl 

(^t The coniainer mu$i itewwtf and then reinitialize the servH. ^ h*» 

^ I ). HW each parameter, tile DO must have a separate ffe 6 A T ^7^^ ^ ir " tat '" (i ^ 

API, ^ l* 1 

^ VUm-h i s 3 1 1 -!- can he used in conjunction ttrith HttpServletBesponse methods 

4/ ii» stream miipui (fata? (Choose all ihai apply.) 

□ \. java .io . PrintStream _q^ ¥1ji p, ^ ( ^IjVrrttrO wtthod re-tutr* a fWtiWrtn- 
bti' tl java . io , Print Writer 

□ Li. java , io , Outputs t team 

□ D java.lo. FlleOutpotStteatft 

E j a va . io i Servl etOutpu tS tream E ih e ^etC^tfu'tSt^diO 

□ I ] ava . io , ByteArrayou tp U tStraa^ Uod re W 1 ^fetOutf ^Wj. 
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Ymii- vn-b iip|jli( (itioti ha* ii ™±£l do With .1 (fuiptf < security- cons traint> ^ ^fc 

lag. Wiihin this lag t-vtots: 

-a siagfc m-l pattern that (tefitofea directotyl 
-asin^l*' Itlip nn'ilinil Hkii Lled;trcs POST 
- a hiii-L- 1 > ■ k name thni declare GUEST 

II' nil of [lie resources lor your application exist Within dircctoryl and 
directory2. and MEMBER to also ;i vafid mk which arc iuh- j Choose aJl 
apply.] 

G A. GUEST- 1 ; 1 nmit do SET reonesti "in directory to 

fl^ H. GUESTs ran dY> GET ivtiiiMia in U>ih tliiwttirie*. The tanibraint b tob itm*ric u 

Uf GUESTS tan do POST requests only m dinctory^. fe ^,^£^,^1 

Jj II MEMBER, (fflfl do GET requests in both dirtfctoritML 
^ I. QUEST- - an il>. POST rop-.!-. m Uoih ttirci lnrU's. 
□ K MEMBER- can ilo mily POST requests iit directory I. 



JSP * t>vtl * ^ 



Given: ^ ^4. ^1 

1. <%@ taalib prefix="c" uri= n http : //java. sun. cam/ jsp/ 

jstl/core" ft> 

2. <%@ tag Lib prefix-" tables" uri="http : //www . javaranch . 

com/ tables" %> 

3. <%@ tag lib prefix- "jsp" tagdir- "/WEB -IMP/ tags" *> 

4. <%e tagllb uri="UtilityE^nction 3 " profix="utll" %> 
Whin about the ulwwr ta#b din-clivcs would cause- ihc |SP to not function? 

JJi« |% attribute! tan 
□ A. fjiir t is wt(jtib because tlit- jm-fto atttthute (ftiisj !-£>mf before the te ip 

■iri attrihutr.. . 1 q , . . -r._ Cii_ 

-Option D ! when itsinj IdjJ riles, 

LJ k. l.itir 'i is wjtjia* became tln-r< j to no mi attribntc. t^d"- ■* "^d instead of wi 

C. I.i.i- I 1- wmiis* Irn-LiuNf tlic- mi V;.lur MUft dCMD with http:// if^n 9 " Kf ^"'V ""^ twv. 

th e TLD (S defied by U e 

U II Line 'S sst wrong because Lhe prefix jsp is reserved tor ittmdard Actions., 

-Oybon V- toe jsp prefi* is reie^ed 
for standard actions 
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Given di. 1 1 rasp is a reference In ;i valid HttpServletRasponss nhjcrt iliiH 

50 >-[>nuiii*, tunong cHitcHj the following ln-adn-.: 

Content-Type : text /html 



51 



Ant) ihc following invocations: 

25. r esp . addneader ("My Header", "my da t a2 " ) ; 

26 . r asp setHeader ( "MyHeader » , "mydataa » ) : 

27. re sp . addHeader ( " My He ade r 11 , "my da t a " } ; 
What dam will exist for the My Reader header? 

□ A. tnydata 

□ It. raydata3 

W3 .. nsydataS^ydata ^^trO adds dab e»*ii*3 d*U 

□ 1). mydata3 r iiiydata2 

□ K. mydata,mydata2,mydata3 

□ K raydata ( niydata2 J mydata3 r ifiydata 



Given the foil living portion <it" a webxnU Btom a legacy application: ^ 

<jsp-conifig> 
<taglib> 



<taglU5-locatiou>/WEB-INF/ tide /pretty! able* > tl<J</taglib-location> 
</taglib> 
</jsp-config> 

A -• - 1 1 1 1 1 1 1 1 J 1 . . i - 1 ■ : \ ( ■ | . 1 1| i in |, l'. '.illi - - ■- I ■ - mm -i i:. | m; I- J. 1 I 1.1, .., 'J. I.-. |i. |. It, U i iil|]i| V .11 
do to remove the- above- < j op- config> trip and still htivc jitonr code work? 

U A, Change lite Uiglilj dvectow*** uri attribute in ymirJSPs to mt vl \Ai^ri for 'tj^ib*- 

and the container will aun.nnutirally map is. 

_y -Cv-tion b Correct We tin *ee 

Q S, J'Uue <uri>prettyT a bl eS </uri> in your TLD Gie, TU> i, u^ e r rVEEMNF, 

□ C. Remove lb* taglib ditttctiws ihat used this mapping in yiwr So ^ e Cflnia^B- will find f£ ^|, t 

JSPs. The container will handle il iiui«m;Hw-ally. TLt> ton-tains > then the 

\ teiffcainer will implicitly r»4i <fcKa± 

LI D. TIih is impossible. The <j sp-coniig> entry here must be \ ^f^. ^ Yroopt TLD location 

present for \he turiiamer to map tbe TLD in the m leferenced ' 



ro«, 
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; ; ; " ; ; jgi^*U*#** 

Fb] :i page that lists shopping rart items, the message ''Ynur -.hupping is ^ 3y)( j t 2_, 

cni|iiy.' : i3i n-,i display whet] the cart is e*npty. Which ef the foflawittg cod* ^ ^-j^-^- 

Miipijcrs could satisfy this functionality Sliming tin- *[ L i»|jed attribute cart is a Lsn 

uf jjimllUlM? (Cln.Ji.wr nil ill, ll 

12 A <c:if test^ 1 $ (empty cart} ■> -Ofiions. A, C.ivdD -*t i\\ ^ 

Your shopping cart is empty. 14 "the (i™pfr*t Jmd preferred loluti 

</e:if> 

<c:forEach vatVitemlnCatt" items-"${cart} "> 

Ohop : display I ten i tem= " $ { itemlnCar t J ' 7> 
</c : EorEach> 

□ H <c : f orEac h va r= 11 i teml nCart 1 1 i tems= " $ { cart 1 " > ^0?b<* if «rl b en,pty * t*U, 
<c : choose> {y, e fi^rfjth will never ruetuic <b 

<c:when test= 1 ${ empty itemlnCartJ 1 > fc^y, You trill ne^er at Uie mcisaje 

Your shopping cart is empty . w herr tht wri opty 

</ c ; when> 
<c i otherwise?- 

< shop : di s play 1 1 am i " $ { i t eml nCar t ) "/> 
</e: otherwise> 
</c:choase> 
</c ! forEach> 

Sf ( <c:choosc> 

<c : when test= 1 $ { empty cart } 1 > 

Your shopping cart is empty. 
</e:when> 

<e ; when test= 1 5 ( not empty cart} ' > 

<c:forEach var= "itemlnCar t" items="$ { cart } "> 

<ahop : display I ton itam^ 11 $ (itamlnCart} 11 /> 
</c: forEach> 
</e:when> 
</c : choose> 

1.1, <c;chooae> 

<c : whan tost- 1 $ { empty oajft } 1 > 

Your shopping cart is empty, 
</c:whan> 
<c:otherwise> 

<c : f orEach var™ " itemlnCar t" items™" $ { cart} "> 

<shop: display I ten itea= ! '${ itemlncartj "/> 
</c : forEach> 
</ c : otherwise> 
</c : choose> 



if 
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Given the following code from a sesvlet, mid givrn iJiui myVar is ,i rrfeiTnre to cither an (^D-W 
HttpSessiem m .i ServletContext 

15 . myVar . setAt tribute ( "myName " , "myVal " ) ; 

16. String s = (String) myVar . gatAtt tribute ( rr myWarae " ) ; 

17. // nvore code 

After line Hi executes, which are true? (Choose all lhaL apply.) 

d A. Tin* v,lu, „r s M be guaranircd. -0^ tffc^ ^ 

□ IS. II rnyvar is an HttpSession. . --wiipilatirai will fail. nSt*"* -tfUi u-^ped^dlv. 

□ C. [f myVar i< :i ServletContext. i nrnpibiikut will fit! I. 

□ I). 1 1' myVar \s.m HttpSassion, s h uuarjimerd in have- the value "myVal" 

□ T, II myVar U ;i ServletContext. s is (iu:irn4iU:ot| io haw ■ 1 1 1 vnfnc "myVal". 

Given ii portion of Java EE Web appliciiimn's clrploymrnl eJcscriplorr ^ 

62 . <error-page> 

63 . <excep tion - type>l QE x cept ion< / exception- type> 
64 , <L1 o c at ion>/mai n£E ro r . j ap< / location> 

65, < /error -pa ge> 

66 . <error-page> 

6"J . <errar- code>404<;/ error- code > 

6B. <:1 o c at ion> / no t Found . j sp< / loca t ion> 

69. </ error -page > 

Whai is true? . . , t>r-, c n 

-Option A: 3* crtcrt™ V tke DD| J tu, 7 

3d \ I hr iVployrm-nr rle«ri ipti .t- is not valid ' ,.^ d ^ |0£*M^>W, tw u**-i4 

Q H, 11' ibe npplkal ion (lirmHii .in lUEisrepliun, nothing will l>c sefVCdi 

U (!. U' the applicnlkm thifuvs wm I* Jhxreptioii, nolRiund.jsp will be served. 

Ll 1). If ihr ;i[>pli™iion dlrtnvs an [OExce^riotl, TiwiiiKnor.j.Hp wjL b( khtvh'iI. 
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Riven \[\f fill |m Wing JS] 1 : . LIT. 

1. <S? String GREETING - "Welcome to my page"; ft> ^ fcZl 

2. <% request . setAttribute ( "greeting" , GREETING); %> 

3. Greeting: 3 {greeting} 

4. Again: <%= request .gctAt tribute ("greeting 1 '! %> 

An alltmpi h madr to convert (lie above JSP do a JSP DdcimicrLr 

01. <jsp : declaration 

02. string TITLE = "Welcome to my page"; 

03 . </ j sp : declarations 

04. < j sp : scrip tl ets 

05. request. setAttribute ("greeting" , GREETING} ; 

06. </ jsp l 5criptlet> 

07. Greeting: Sfgreeting} 

08. Again: <}sp: expressions 

09. request, getAttribute ("greeting"} ; 

10 . </ j sp : expressions 

Wh:il is wrong witli iln- m-u ]Sl' I )■ n ui hj-i i I ' < \\- » <-.f ,\\\ i h.«i ,i|>|>lv. 

□ A. XiXjsp: roots WW clt-rkiml. -Of-biw A : <jn«r»t> « notarf^'^ 

Tlir template tesf should In- vvnifjped in a <jsp: texts ta$ -OH** 1 & : £HW*at, tU 
_ is wL valid XML.' 

□ (.:. EL expressions at* dot allowed ui JSP Dncunicnta. 

I ). Hh' <; jap: expressions contents should nui have a semicolon. — Op^^, ^ : ^ typ*' 



Whicfa i if the following a LEAST likely m > ni.ikr or m <-ivc nmviirk call*? 'T^tll 

□ A. ]M)I ,,,-vn ^ ^ ^ £ ^. ettiveJ ^ M(I rJe ft ^ 

irnnsltr ubjed as. the tcr^tt aw***-! 

□ C. wt.vkc tou«uii ~0?ii+n W feWn otjeets a« typt^Jy sent 
U Q, Ironl cn.HmlJcr w wip^d b, nd^ork £j|L 

□ ]',. iiaL>-VC-f| nijit; film- 
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driven: 



ID, 3 {questiorffrimber} ; S(question} 

11, <c:±orl;ach war-" answer" items-" $ (answers) "> 



16. </c:forEach> 

. -0vti«* A «W C- eittftJW « t« e 

J if question ;ii rilum* i* a Mrintf lh;ii insiv unitam XJ\ L inm limi must Ijc . , r n i_ i<_ i -^j ->-> 

* , * , > . , h default *° both A and L are 

displayed m i he browser as rciiiiJar test v\iih 1 1 1 ■ - <i iwc snippet, ihr inm-siT ' , i j , „~v i 

i- m u i-li-|'l.ivii!'' \M I. u=! - U h.ii i .in I ■ 'I i. iii .;■ >:■ m mi- Uvmn' _ , ^ . . £i ... at i evt > £, ' 

13 A. K. pl.K, $4 question) with <c:out value-' 1 ${ question} "/> trill d'sf by ^ Cft1 roP 6 * -1 ? ritW- 

i— i -fctiiTi mistake trie** wf *>t.**l' 

U U. Replace $( que st ion) with <c: out >${ quest ion></c:ou t> 

^ C. Rcpl.h-4- $ (question) u Li li <c l out escapeXml- " true" value-' 1 ${ question} "/> 

□ h. Kr[)| ${ question } v iili S( question) ft> -tytiorv the valve titbit a 

-flvt«* -> but tt» ^ eve- t-W 4or < t;o ut> £„ eh U K 



Ser^etl. 



Vnui |:iv;i KK wi'h application is gaining in popularity and decide to add a ^ nf\^l& 
J^q mv<iikI serve? iit support the viiIuuji- <>f client itqueabh Which arc ir«f about ihr 
ttngr«ti(kn of a session from one server l<i the other? (Choose all thai apply.) 

L3 a. Such initial ion* are nifi possible within a fffc**k«it 

When a *eftMDH is migrated, it* HttpSession gc*3 with it. 

G C. When -i seaftjon i* Agisted, ila Servletcontext goat with it. 

Q 1J. When ,t se^ssioq is mijrraierj, \ii flttpBervletRequest pse? with ii. 

13 R. If -in (]hj«£i is added ihin^ HttpSession. setAt tribute. 1 1 ..- iil>ject J "pi<on £- 

■ hum l«- 3*rialiaatile In unlri m l«- niij;i.ti"l In mr imn m ilir yo f F*"t *n obie/f 

oth« Uh,esj ^i^Jii 

_l I I: .,n object b uddVd Uiing HttpEession . setAt tribute, and the 

object-3 class hii^ ttnplemfrcted Ser i aliz able. M*dObj act utid _.0pt>ori f : 
Serial! zaLblQ .writeObject, juH lhr s«$$ion i* mi(rri*tf d, (lie aren't guaranteed! 
coEtainer will invoke thews readObject and writoObJoct tticthods. 

O (I. II" j sos-sirHi nt tribute Lni pie rn t s HttpSessionActlvationListener. 

ilic i iHitiiiiici's i mly ft-quiri-ment is tr. notify lisicnr^ (im-e the sfssitm tms "'^ft |t,^ • <5 : the denta<ner 
lit-rn ;n livan-d mi the new lervec *>*K*tal» stnd a 

paiii^tion wtet 
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A Java El£ deploviiu-nt descriptor din-lures severid f til t-is whose L'RLn match a 
gm n retyW&t, and ttfe d'^claieii »ev*r»l fitter* wttose <s ervla t-name> fcagu 
1 1 ..i n 1 1 the siimr request. 

What ttalemmts are true ahoul tin- rules that thi* eontaitu-r likcs to invoke the 
filfcrii-i for that rtquelt? (CIkhhw thai apply.) 

Q A. Only Liu- ^servlet-namo^ tnatcJied Hilars wilt be invoked. 

□ B, Of the URL matched filters, dttly the first will be invoked. 

□ or iln <9«viet-n?«e> matched lilt*-™, cHdly the fjtr'fl will bit invoked- 

□ ] ). The <Bervlet-name> matched filleri will be invoked before the- URL 

matched fillers. 

Q K. All of the URL matched filters ^ill be invoked, I mi the otsder of 
invocation tiTKlelinerl, 

All of the L"RL matched filters will lie iim.k.-d. in Hi- urtfci in. which llicy 
appear in the DD. 



pn-rt -the ionijine* 

b#*e all of tte URL 
^ak^d £lhe«. i" PI> 
.if Id- 3t ior wrdeir, iJKen t>t* 
<jerv[cfc-nJn>t> tnjitbtd 
{irUn wll te looked, a!*o 
in DD detldred order 




When comparing wrvlrl initialization pnramclcrs to context initialization parameters, iw« *3> 

i are true fcr both? (Choose all that apply.) \^^° 

A. Iti ilir-ir rwpocrive Dfi tags, they bflttfi have .1 <paraia-nante> and * 

<param-value> tag -^0pti*h B= only -tht 

□ EL Tli.'ir respective DI) tans are both phut.-d dirvcllv under 1 1n- <web-app> ^R^^*^***^ ^ 

Their reaper live raeihodh usf-d id retrieve initialization parameter values are {ht -iw<b-aff» 

li< iilt called getlnitParameter 
n -Option D : cry ti>nie*t fara™* ta» « 

U D. Bi>th can be ilin-ciU acee«4'[l IroTti aJSR j Hve£ {jy 3 t£ts «d fv-o™ JSP* 

Q K. Only changes to eoatexi initialization parameters iit the 1)1) ran he acs. rsied 

\\ilhrail re^eployiiiK the Wrh application. £ ^ ne dJ,«- Arr fLingcs 

■b PD riyna^itally awnsibk- 

JSP 2*P 



A.fSI 1 developer warn* mi include ilie contents of ihe Ille copyright _ j sp 



Which merlumisniv CUti dn this? [QtOPSe all lhal apph.. 



7 



A <jsp r directive, include file=" copyright . jap" /> J ^P 

Ii. <%@ include me-«copyright. J sp" *> "f ^ * B V T^ 6 ** 

« appropriate -lev JSP paoM 



JSP pd^cs 

CH 1 ). <jsp: include page- 1 " copy right . j sp " />_ ^ fa tt i« t b> impart £™Upt 
□ E. <j S p:i nS ort fila="copyright jap" /> p , ( 



sUdard ate do* 1 *t e* 11 ^ 
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You are dVvelitpirn; an application t«j tnajlage customer JH'irounfa for a company tli.il otters 

62 ph"ii<*. cable, and Urternet lervJee* Many of the pages contain a seaifcn fttn&loaality Tbe 

sr:m |l \k>\ stumlrl look llic SiiiVie nil I'Vci } \ki£<- \t\i\ toi\ft<- of I lit* [M^'fl ihoulif limit ill** 

ir.in li lip niilv [iln'iir, i nlj|r, im 1 1 j i c~ 1 1 it - 1 Luinim!**. . c j, 

,,- , <u , . - KP *itW^' 

liiven a separate JSr uaiiied ^earch.jsp: -J-" «,/%o 

1. <form action=" / search . go"> 

2. Find S (param.accountType ] Account; 

2, <input type= n text" name-''seatchText" '/> 

3, <input type="hidden" n atne=" account Type' ' vaLue="$(patam. accountTypej "/> 
3. <input type™'' submit 11 value-" Search " 

4 . </£orni> 

Wliiti tag -ibmikl ynti use tu a JSP that nt-cdi. tP search for cahit- iutiuihIs? -Op-tion /\ : <jsp mtf^-, 

□ A <jsp : include page=" Search. jsp" accountType=' Cibla'V> Uh a>1 

/ hawed adtDnhtT^ 

J3 I!. -' j sp : include paje= n Search . j sp rr > .. n ft jra aiiouhtTypel 

<j 3p:pa ram 11^=" accountTypa" value="Cabl.iV> *r Lbk 

</ jsp : include ^ <ji?;pjrair> 

□ C, < jsp; include iLLe-" Search, jsp" accoun tT-/pe=" Cable "/> 

□ 11 <jsp:includ* -file^" Search . jsp"> -Of^iflM C drd D; cj-fi-hcl^o 

<jsp: attribute name="aGsountType" valus=" Cable "/> * ies ™ P a 3j e ^-Me TSie 
</ jsp : include > + lic K&itutc h tier"! in 

th£Lde di-nefi-tives 



While tf-sting how various tag* atid tctiptfeti work, a developer creates the , 1 & 

li-lli.wm S JSp- Sf^rW 

1. <* re-juest. setAttriJsute { 11 name " r "World")' %> 

2 . <■ - - Teat --> 

3. <c:cut value= 'Hello , 5(namQ)'/> 

Mm h tit ihr tlrvrltipcr'*! suqarisc, iht: btt)Wt(rr doesn't 4 lispl.ix .niyliiiiiu.il -ill wheal 
her JSP Ls retrieved. IT the developer view:; the HTML -source of the ppge, whfr 
will she llnd in the output? 

□ A, <!-- Test — > 

□ H <?-- Teat — > 
<cr-iut valwe= ' Hello , $ {nantel 1 /> 

C. <1~ T#st — > 'P^Zf' TKe ^'" c} ^ equated tvt 

<e:out valuer 'Hello , World' /> tkt ..'£,F J W |J ho |; K t ^ MW ^ f ^ ^ 
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A dating service* application askn its single users a serie* of question*. A session scoped 
■lttriliulf i-'illiil compatihiLityPrafQD Hi iy|n HashMap .Jri-aHy in hi whlcli each , , 

sabmitted question ED and WttWtfl pwi art itortjd, j£TL*l' setb** * 

Given: V* 

22. <% ( ( java .util . HashMap) request, getSession () . getAttribute { 11 

eompatifeilityPrc>£ile M J } .put ( 

23. request.getPa^ajtifiter(''questiQRldSuljmitt6d 11 ) , 

24. request. gctParameter ("answer Submit ted") ) ; 

25. %> 

How inn this hf i'f|il;u ffl iviilmui using scrtptlers? (Clmose nil thai apply) 

□ A <c :map target^ 1 ' $ { compatibility Profile } " -Ofb» A <£™ap » iwt a ntal iaj- 

key="§{param, ques tionldSubmitted} " r 
value=" $ { par am. answer Submitted} " /> 

□ I' CjspruseBean id=" compatibility Profile" class= n java .util.HashMap" 

s c ope= " so s s ion " > B <jip*acBH»* onfy 

<jsp: setP roper ty namQ^compatibilityProfile 11 worb with beans, not 
property- 1 $ { param . que s tionldSubmitted } " 

v^lue= 11 $ ^ p^r^m , an* wersubitiitted} "/> 
</ jsp : U3eBean> 

$1 compatibility Profile [param . ques tionldSubmitted] = , ^ ^ ^ ottjett 



I J <c : set target-" S { compatibility Profile } » , p= < ^ ^ ^ UEid 

proper ty="${param. que s tionldSubmitted}" r , , 
value=" $ 1 par am . answer Submitted} "/> 
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\ | it' 'granirner i* treating a filter I"t ajAVS YA: Vftfa applicitii m. (men the lollmviiig rcide: "}q1 
7. public class My Filter implements Filter { 

S. public void init(FilterConlig confix) throws Fi 1 terException ( ) 

9- 

10. public void doFilter (HttpServletRequest request, 

11. HttpServlotRe sponge response, 

12. FilterChain chain) 

13. thiows lOException, ServletEx caption ( } 
14 . 

15. | 

Whal change(») are necesKirj to create .i vjslid filler? (CJhmisf nil thai apply.; 

A. No changes arc necessary. 

IS^R. A destroy () mettnid wm he added. ^ £. ,f ^if^ eke, dofrlte»<> 

t : I In- doFilter() method's body miai be Ranged, wtft ihai*dofiW> 

Tin- init() method's ugnalure must he changed. -Ofhm D Wfcf) Ut-ow j £ev*let£*tef-t lon . 

3D Iv The doFilter (J method's arguments mittt bp changed, -Option, fc deRNzrO kk f i 

□ V, The doFaltarO method's exception* must be dialed. ^^^"^ a«I £mM/t eaf0Me 



Yiiur company want* to Include a splash ftsgs, SplashAd. jsp, to sdvertiit; other company J£P v2-0 
offerings to users as they first enter die site. On (hi* new page users will br given die option to wctoti 5.5 
click a checkbox on the ad page that says"Uo not show me this otfer again" nntl click a submit ^ ^O^-^fO 
button that says "Continue to My Account' 1 . If the user submits this form With (he checkbox 
ihetked. the rceeiviiig Servlet sets a Cookie with the tnmie i>l "ikipS plash AfPtQ the User's 
browser :md then passes control back to the mainJSR 

The main JSP will l>e responsible lor forwarding the request to the splash page Whal snippri 
ran be added to the top of the main page to send the user to the splash page if diey have not yet 
ftt-lc-L tL-d die ihetkbo.\ lo imml llje .ilI ujlri? 

tk3 A. <c:if test="§ {empty cookie . skipSplashAd and pageContext . session. new} 11 > 

<jsp : forward page^'SplashAd . jsp"/> ~0?k™ h C<x*ttl The fflrwfflrd ^J**** ^ft ™V„ 

</C ' W Q led J nevcr y t 5 kiy Ac id with W 

□ It <j±p; forward page="SplsshAd . jsp" £Lu£h="$ {empty cockle - skipSplashAd} "/> 

□ C, <isp: redirect pago^'SplashAd. isp n /> „ , _ , n -Ofi*)* B "The f UK 
U 1>. <jsp: redirect file="SplashAd. jap"/> <^4 T >«dnre£t> t*J 

□ E, <% If (cookie. get C'skipSplashAd") = null session . isWew [)} \ %> 

<j S p. forward pag^-'SplashAd . jsp "/> . ^ . ^ tookit ^ 
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A pruyrrummt'i uniits to implmn in ;i ServletContextListener (Jivrn ihe following DB 

IrillTTllCIltT ■ 

101. <l~ insert tagl here -> JSPl.^**^ ' 

103. <parara-name>myParam</paraHi;-riame> mm" 

103 , <par am- value>my Value</par am- va Lue> 

104 L <!— elose tag! horc — > 

105. <listener> 

106. <! — insert tag2 here --> 

107. com . w ickedl ystna rt . MyscL is tener 

108. <f— close tag2 here — > 

109. </listDne?r> 

Ami liiis listener cliBS pi*eu : do*cpdci 

5. // packages and imports here 

6. public class MySCLis tener implements Seirvl etc oritex tils tener f 

7. // method 1 here 

S. // shutdown related method here 

9- } 

Which arc true? (Choose all that apply.) 

O A. Hie DD IragmniE C-iWinol lit- vntid 

|u II. Liyl --h- ii il' I I m <con text-par am> n£i*&ntt sei*t tbJ& 

Q (,'. tap I *h«Hltd l>c* <servlet-param> 

,5. lnii.2 should I fi <lia tener -cl as s> 

LI K. I.iji2 should I (i' <servlet-context-clEis s> 

□ E itlclIk id L -ill- 1 In initializeListener 

^ i!n : l In n. I [ -In hi U I lii t;cuiU;jtLIii±L±<illii«d 
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Tlic wkijetJlystnart whsht bm ji validly d^loyedjavs YA\ web appli atkm and 
£j§ Deptoynushl descriptor thai i otilaks Else foltawbgi; 

<we Icome -file- 1 i s t> 

<ttelCMie -file>we ICCri&O . html </Wel cotae -file> 
<welcome-£lle>howdy html</welcome-fiae> 
<welconie-file> index . html</welcome-flle> 

</welcorae-file-list> 
A [xtriinn of ihf weh app'j dinvmn structure kmks like this: 

I 

|— index .html 
I 

| — welcome 

| ] — welcome . html 

I 

I— fOObSE 

| |— fiowdy.html 

[I the application FWOiwCU (he Itilluwinir (wo requests; 

http : / /www . wickedly smazt . com/MyWdbApp/f oobar 

http : / /www . wicked lysraart , com/My WebApp 
Whir.h scl of re spouses will I ml: 1 

□ A howdy, html iIm-ji p 404 

□ \\. index.html 1 1 n-n .i 404 

□ C welcome .html i ln-i i b 404 

^ 1 ). howdy . Html index . html ^1** J> * tie DD <Wi e-rfai* 

Q K index. html i.Uni index. html dirsii^y SjxtiTieo in tie r^erfc j„j 

□ K »«*■«•« .oic^.htMi ^^U^'ft^u, 

□ i.. welcoroe.htmlih.-iiindex.html r '^iti d.redwy 
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Yrmr weh application baa a tfabd ckl with a single <securi ty-ccns traint> >.n\. 
U'idiin lliis tag exists L 

- ;i iihgle Ik i]i method that declare* GET 

All of ihe resources tn your application exht within directory! and 
dircctory2 and the only sfefuwd miles are BEGINNER ami EXPERT. 

If you want to restrict BEGINNER-, from using resource^ in directory£, which 
are true about ihe urt and role tag(s,i ymi should divlaiv.' i( Mmiikc .ill dun npjih 

□ A. A single url lag should declare directoryl and a »iirg"!e role lag should 

declare EXPERT 

G II A sirtgle url tag should declare directory 2 mid a liagfe tt»k tag should 
declare EXPERT 

□ C. A single url tag shuuld declare directoryl and a single role tag should 

Jet- kin BEGINNER 



□ E. 

□ E 



A single url tag should declare directory 2 and a single role tag shuuld 
dec Lin BEGINNER. 

< hie 11 rl ts,g shnuld declare AMY and ii* rale tag aboiiid da law EXPERT, 
and .mother url lagr should declare direetory2 and its pole tag should 
i|r < Ltu BEGINNER. 

One ml dig \hmild declare hnth directories, and its role las mid declare 
EXPERT. . n n I .uiolbrr lii'l tiig shuuld di-chsrr directoryl mill its mlc ia^ 
shuttld (leelafv BEGINNER- 
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